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. An attempt is made in. this paper to depict In Lta main 
outlines the general behaviour of ciphers used by the Soviet Air 
Forde before and during the war against geBMANT. 

The difficulties which beset such an.attempt at reoonatruotlon 
are evident if it ia remembered that the GAP cgyptographic-service 
oh the Eastern Front had to deal every day with about' 100 major 
cipher systems and that these were on the average ohaged every 
three to four months. The cryptographic service of the GAF worked 
out more .than '900 major cipher systems during the war against 
the SOVIET UNION, quite (part from unnumbered or elementary 
oiphere .(and ciphers whose existence was not indicated on 
wireless' networks) whose umbers run into tho usan ds.' 

. The author has personally worked oh a large proportion of 
these systems or else supervised the work and advised others in 
a tec hn i c al capacity, but he is not able to furnish more exact 
details, since no referenoe data were available while this paper 
was being written. The generally high volume of fcraffio intercepted 
.and its great variety made it imperative'f or the sake of Taental 
hygiene" quickly to forget all details not essential tp the dally 
task. This wqa particula r ly the ooae since a comprehensive 
filing system enabled every detail and every process to. be 
reconstructed at apy time, , 

This paper deala only with the systems of the SOVIET Air 
Force, but what is written here is Conditionally valid for all 
the Armed Forces cf the SOVIET UNION, 


.The general Characteristics of SOVIET cipher systems can be 
auanarlsed in the following pointai 

1• Substitution systems are used alm ost explosively . The . 
oipher text appears as a group of figures, thus the SOVIET 
wireless operator is aooustoued only to send and redeye' 
figure symbols. The ohLef kinds are substitution and oodo- 
book or table ciphers. These methods are varied in a.number 
of wqya and adapted in every case to their particular purpose, 

2. The marked - tendenay to adhere to non-hatted construction ia a 
notable feature, both in the provision, of olohar data and in the 
luw of~ reciphering method a. this fact was often of oonalder- ■ 
able essLatanoe to oryptogrephio efforts. 

3. The SOVIET encipherer knows no hard and fast universal basic ' 
rules, either In the aet-uo and form o?~tEetexF~io^ be gnnlnhgr«.i 
(e.g. use of punctuation, rules for dealing with addresses and 
signatures ato) or in the.application of the various fundamentals 
of enciphering. This lack of consistency in enciphering to 

boob extent inoreasee. the difficulty of the works every method . 
has peculiarities Which must be discovered anew in each case and 
which oan in no oeae be taken for granted, . 

Ve»y great Importance is universa lly attached to secret transmissl 
' - a -isn*lB. Even signals sent by land line, (telephone ooowmmXo 

are in principle to be enciphered. The-instructions in oust 
oq>tured keys make special provision for this. On numerous 
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occasions during tbs war, draconic punishments were 'ordered 
against signals personnel who infringed this rale, but the. - 
' number of messages transmitted in clear, for instance, was 
nevertheless fairly considerable', There was apparently no 
systematic monitoring of their own wireless stations,' 

5, ■ The maintenance of aeoreqy ooncerning their own oiph er 
: . ‘Isation- extroardii ly thorough. Enciphering tiT 
the'deciphering of wire-leas and telephone massages was ■ *- 

entrusted exclusively to specially selected and trained officers . 
whft were politically reliable. Since neither the men nor their 
officers had even the slightest knowledge cf their own cipher ' 
service, the circle of those initiated' remained amazingly 
small. For this reason it la almost impossible to assist the 
task of thB cryptographers in. technical muttcri by interrogating 
prisoners or by the Aowenr, - On the ocher hard it is perfectly 
comprehensible from a psychological aspect that the troops were 
. inclined to.underestimate their own ciphering methods and means 
and thereby-led to commit indiscretions. 

II. THE SEPARATE EjZHESTS Cff 30VXCT CUBES! SYSTEMS . 

A, ME KEY DATA . 

preliminary remarks The Hussion alphabet is expressed in 
maohino'type as folicwsi- 


a- 

* • 

b- 

& 

W- 

e 

g- 

c 

■ dp 

A 

e- 

£ 

v- 

V ; 

a- 

3 

i- 

k’ 

y 


•' k- . 

K " 

i- 

J7 

m- 


ti- 

H 

0 - 

o ■ 

P- 

n .. 

T-. 

P 

a- 

c' 

t- ' 

' r 

U- 

y 

f- 

$ ■ 

h- 

x. 

o~ 

u 

&- 

M 

oh- 

Lii 

<3r 

LA 


W 

i- 

' i> 


3 

*a 

to : 

g ■ 

ft ' ■ 



- 



1,' Substitution. 

■ a. Simple Substitution 

Simple substitution is the simplest form of substitution. . 
alphar. Every letter' has only one figure value in cipher. 

The statistics-of a cipher text ‘therefore yield both the 
number of letters' used and their true frequency. 

The security of the aiphar is very low; in the case of 
non-hotted substitutions it sinks to nil. ■ 


mcaaiE gfr now hatted gmmM i 
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i 

z 

3 

> 

5 

,b 


8 9 

Jd 

a 

cT 

B 

r 

o 

t 

>« 

i\ 

U 

U 

z 

K 

A : 

tA 

H 

O 

n. 

r 

o 

T 

y. 

k- 

$ 

X 

H 

a 

UJ 

'H 




K> 

b 

j St 

f 







f ' ' 
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■ EXAMHE OP HAXTH3 3UBSTiroTI0Tf - 

A - 29 

1-85 

H - 12 

CH - 77 

B - 90 

J - 30 

S - 75 

q - 87 

V - 63 

K - 15 

2-57 

Y -41 

6-07 

L - 70 

U - 36 " 

X - 78' 

D - 83 

M -42 

E - 20 

4-14 

E -43 

H - 03 

a - 99 

5-97 

V - 54- 

0-94 

C - 24 

JT - 52 

Z - 'i S 

P - 00 

0-48 


b. Kultinlc 

j- Subeiitutuion 

gablo 



In' the case of a multiple substitution table, 
individual Jitters - and particularly such as recur fra^upn^jj’, 
are eaoh expressed by several code figures, This blurs the 
statistical picture to a greater or leaser degree. Compares 
with 3iaple substitution, the security of the cipher is indeed 
higher, but the various- equivalents can be reduced to a comaon 
denominator with the aid of parallel pcasageo enciphered in 
different ways (addresses* commonly occurring word stems etc.) 
or by bigraiu statistics. 


EXAMHE Of KOH HATTED SnSMTDIIOlIl' 
Egg aSVZBAL EanVAlBHTgt 


A - 

00.35,66 

X ■ 

■ Ct,V:7*, 

B - 

16,51,92 

CH 

- 24,59,90 

B - 


J - 09,44,75 

2 *» 

17,58,83 

Q 

- 25,60,91 

w.- 

02,37,68 

K > 

■ 10,45,76 

rp M 

18,53,84 

X 

- 26,61,92 

& - 

03,33,69 

l * 

■ 11,46,77. 

u - 

19, 54,65 

X 

- 27,62,93 

D - 

04,39,70 . 

K ■ 

■ 12,47,78 

E - 

20,55,36 

y 

- 28,63,94 

B - 

05,40,71 

If ■ 

• 13,48,79 

H - 

21,56,87 

b 

- 29,64,95 

V - 

06,41,72 

0 - 14,49,80 ' 

G - 

22*57,83 

& 

- 30,65,96 

z - 

07,42,73 

f - 

■ 15,50,81 

0 

23,58,89 



EXAHHjS C8' HA3TEP SUBaTITUTIC-?' tflTK 'SEVERAL EPErrVAIRKTa 


A - 52,84,25,87 

I - 81,56,86,21 

R - 34,27 

CrI - 18 

B * 49 

J - 42 

8 - 53,41,08 

9 - 07 ■ 

V - 38,92,67 . 

X - 19,78 

3? - 58,40 

T - 93,96 

e - 60 

L - 17 

tr - 89- 

X - 06 • 

» - 15 

H - 01, 35 

E - 37 

4 - 63 

B - 47,51,59,24 

H - 71,68,29 

H - 80 

0-23 

V - 97 

0 85,43,10,39 

0 - 6V 

A - 91 

2 - 45‘ 

P - 54,31 14 

0 - 73,90 



O. Expanded Substitution . 


Xn this variant the number.of Clear test aynbols is increased . 
by figures, punctuation marks and tigress (which are mostly short 
words)) this has the effaofc of stilj. further confusing the . 
statistical picture of the cipher texts. But even in this oase 
there are no serious difficulties for the cryptographer. 

As in the above-nentlonad examples, it is possible to 
distinguish between hatted and non-hatted fonts of expanded 

substitution. 
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EXAMPLE (ffl 1 THE RANGE OP ST-BOIS IN AN EXPANDED SUBSTITUTION ' 


k 

■ N 

C 

6 

B 

KA 

1 

3 

1 

TT 

HE 

GH 

. 2 

G ' ■ 

NO 

Q 

•3 

D 

0 

V, 

4 

DO ‘ 

OB 

i 

C 

5 ■ 

jjbs 

P 


6 

V 

PO 

•U 

7- 

ZA 

R 

•* 

A 

B 

I- 

3 • 

■ 1 

r t 
L • J 

1 9 

IZ 

K 

T 

TJ 

1 

' 1 


1 00 

) . m 

L 

■>' 

1 

' 

i 

H. 

HE 

NO, 

\ m 


All substitution variants occur as a rule as ad hoc or 
emergency keys. After the abolition cf FE-toblesfor t,ha wl to less 
operator at the keying device (see below) they occurred especially 
often; latterly, however, their use has again been sharply 
■curtailed. - 


It is not really possible to talk of a "reoiphering procedure" 
with these fcinple keys. It does of course happen that simple 
non-hat.ted substitutions, whloh in thamsalvus are unrelated, 
appear as reciphering variants and are so listed by a registry, 

2. The gable ‘ 

The tab It is s. cipher in an exactly determined fora, the nucleus 
of which is, in most coses, en aiphebst. The predetermined form 
allows of the application of reciphering rows and thereby of its 
more or loss long-term ar.plqyraent without mors than ordinal* risk 
of compromising the basic key. 

Sometimes the individual items in the table already have more 
.than one'meaning; in such a oase the correct interpretation of. 
the cipher group la guaranteed by special switch groups. 

It is unnecessary so go into details of the different forms af 
the resulting picture, since jverything written in tlie next chapter 
(the code-book) applies in equal measure to the table. 

It should bu pointed out that there is in practice no clear-out 
differentiation cf the terms "table" and "oode-book". The SOVIETS 
themselves, for instance, designate some cipher instructions of 
several pages (i.o. small oode-booksS). "tablioa" end not "kod". 

Attempted definitions the table 1 b a single page cipher 
Instruction in reaiphering. which at the most two independent 
processes may be used..' 

3« The Code Tobin (Signaltafcll 

‘In contrast to the table, the code table is in most case a a 
cipher medium adapted to a specialized purpose (d.g. air to ground 
traffic of individual special units, meteorological reports,' 

,reconnaissance etc,). The task of enciphering letters recedes 
into the background or is even impossible, because the basic text in 
most oases locks on alphabet and consists of only stereotyped orders 
reports and queries. 
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The fact that the code table la usually a small one, means 
that the items are not arranged alphabetio&lly and dan often not 
he so ordered, faeoauae the table consists of items made up of 
several units joined together. Nor is alphabetical arrangement 
necessary, beoauee the espll number of items oan be envisaged at . 
a glance . 

: The province of the code table- ia air to groupd and air to 
air trafflo. It Is mostly written out by hand and, as a rule, 
intended for one operational flight only. Beoiphertng ia 
superfluous, beoause in thede otroumstanosa it ia no more trouble 
to remodel the table. 

The aeourlty of the oode tails 1 b very high. Suooesaful 
reconstruction can be achieved only by close oo-operation between, 
wireless trafflo evaluator, content evaluator and cryptographer. 

The man best suited to this task la not the 'cryptographer but the 
traffic evaluator who achieves his objeot most rapidly on the 
basis of the dally reports on the signals traffic involved. 

Captured copies, which are comparatively often available (from 
airoraft .which- have been shot darn or which have mafla emergency 
landings) are of very little value owing to the short length of 
time during which such tables remain in force. 
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EXAMPLE GF AW AIR TO GROUND CODE TmBI'.K 

! (BiXioicJAiaaiml 


250 wylet 

251 kura ... graduaow 

252 • persist frontowoj linli . • 

253 poaadka'na 0^ redress .... 

254 wynuvdonu&S poaadka ' 

255 oenitnaB oaorona w kwadrota 

256 istrehiteli protiwnika w kwadrate 


310 ’ aewer 

311 aswero-woatok 

312 wostok 

313 . Qgo-woatek 

314 ttg 

315 ■ Hgo-aapad 

316 zapad 

317 aaworo-aapad 


. 477 pcgoda ■ 
478 oblaBnostx 
47? water 
480 widimoatx 
. 4B1 ' 

482 • dovdx 
433 sneg 


600 bail 

601 km ■ 

602 Mtr 

603 kwadrat 

604 8as 

605 mlnut■ 


830 dwivenie 

By akoplanie wojsk protiwnika 

832 otdelends 

833 wzwod 

834 , rota 

835 polk 

■836 diwizia eto. 


450 podwoda 
. 451 awtomaohina 

452 tank 

453 pehota 

454 . konnioa 

455 artlleriH 

456 art.ogonx 

457 awi a ol H 


857- gorod 
858 derewnK' ■ 

85 ? w iesu 

860 opuohka laaa 

861 na ohoase eto. 


000 :.jc 769 alphabet with 
/ / / three equivalents. 

030. 56C 799- 


Figures are given in olsar.' 
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4* Tha Sasic Book . 

■ The basic book is tha principal enciphering medium of the 
SOVIET Air Faroe (especially in the oasa of its most important 
branch from the intelligence aspect, viz. the ground organisation). 
Tha external form and the internal construction of the basic 
books used are varied in mary waysi all variants, from the 
strictly non-hatted basic book with a few hundred items to the 
hatted hasio hook with up to 30 , 000 ' items, are present in many 
different forma. 

a. .ffith reference to the relative- arrangement 'of the various { 
bosio book.significations , the following variant a ma y h« 
alstinguisEeSj 

aa. The Won-hatted hasio book . 

411 the words in the baalo book (vis. iterne) are in 
striotly alphabetical order, both in respect of the initial 
letter aa of tha following letters. Figures and 
punctuation marks also are sometimes treated as words and 
brought into alphabetical sequence. 

Once this principle has been recognised, oryptographio 
work is considerably simplified; restoring relative data to 
then true values, searching for reciphering and interpreting 
new baalo" book significations (deaoding) dan be'.made into 
more or less mechanical processes. 

bb. The partly hatted hasio book 

With thia variant the strictly alphabetical character 
of the basic cipher is disturbed, in whioh oase two 
possibilities existi - , 

eitheri ell significations remain in alphabetical order 

as regards their initial letter, but.the position 
of composite items wades with different initial 
letters. 

Example ! order of items (p) on pages 1 and 2 ofthe 
basic book, 

1st page! JN 1-43, jb 1-12, 1-45 

2nd pagei. jg 46-95. KC 1-3, EH . 

(Zn this example each page has 100 line B, Tbs 
significations beginning with any one letter ore 
.numbered consecutively according to their 
alphabetical■sequence). 

I 

Thia variant first occurred during the war and 1 b fairly 
frequently used. - Cryptographic difficulties are increased. 

In particular, the true page values of the code-book can only 
be restored whan -items with a single initial letter a over 
two pages of the code-book (location of .adjacent pages). 

Should this not he the oase, then the true page values oan be 
restored only on the .‘basis of a recognised system' in 
• reoiphering, 

...» 

on the sequenoe of the initial letters in the baalo 
book is preserved, but the significations with a 
given initial letter are in each case hatted' among 
' themselves. 
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Exaaple i Order of items on page 1 of the basic book. 

PA 7, 15,2,43,25,1 etc. 
a 10,2,8,3.1,12,7,9,11,5,4.6. 

P£ 24,30,11,17,1,8 etc.’ . 

This form occurs comparatively rarely and then ohiefly with 
small basio books in whioh the items under one initial letter 
oan conveniently be covered .at a glance. 

While in the case of this variant, there is no difficulty 1 a 
restoring the true page values, the lines oan be matched with the 
original only if systematic reciphering rows are used. 

. oo, The hatted basic “book . 

In this, case the significations are not arranged 
alphabetically at all, or at the most are arranged according 
to subject matter, (e.g. items for meteorological reports, 
addresses and ranks, units, 'reconnaissance reports eto)', 

So allow of reasonably fast working, either the basio 
book must be relatively small or else enciphering is done from 
an alphabetically arranged conversion oopy of the basic book. 

The SOVIETS limited themselves to fairly small basic bobks of this 
kind; the introduction of conversion copies was never dsteoted. 

The reconstruction of hatted baaio-books is naturally 
considerably mors difficult; the sane applies to- the. task cf 
determining true values. In this case also, help is 
afforded only Ivy some kind of s/atematlo construction 
(reciphering rears, systematic arrangement of figure items 
in the code book). Similarly, decoding is a more laborious 
prooess. 

b, in respect of enciphering of figures , the following forms of 
basio book o^y be distinguished: " 

aa. The basic book without figure items . 

The basio book provides no means for enoiphering figures. 

In suoh a oase* either thefigures must be given in clear, or 
else they are altered'according to soma auxiliary cypher 
.-outside the basio book (figure redphering tables). Eeoipharing 
of figures by letters and by word items in the corresponding 
basio book was only very rarely observed. 

In order to .prevent figures in dear, or figures converted 
according to an auxiliary cipher outside the basio book, being 
distinguished in the normal enciphered text, those figure 
groups ere assimilated to the cipher text as for as the size 
of each group is concerned. But in order to avoid 
misunderstandings in deciphering the signals, basio books 
•are occasionally provided with special code (SIGNAL) groups 
whioh indicate figures in the cipher text. ’ 
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bb. The basio.- book with systematically arranged figure items. 

The figure items are for. the mat part distributed .in the ' 
basio book according to an easily recognisable.system. 


Example , of systematic distribution of figure items 
on two.adjacent basio book pages; 
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In the oase of.this variant, the cryptographer is also 
enabled to restore the basio book to basio values, if it should 
be hatted 1 . - Such basio books were fairly, frequently noticed. 

On the other hand, it is.also possible to confine the figure items 
to one special portion, in the body of the basio book:- the last pages 
of the book are generally used for this purpose. In this oase 
the unknown figure items can be just as easily identified as if they' 
are systematically arranged in the baaio book, but' the figures cannot 
so easily be used for restoring the true page values, 

00 . The basic book with a partially syatenatio arrangement of 
figure itemB . ■ 

As a rule, the figure items are scattered through the . 
basio book in ascending or descending order,-but the intervals. ' 

. between adjacent figures ore selected on a purely arbitrary basis. . 

Example of a partially systematic arrangement of figures: 
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Hera, unidentified items ere often reoognised as figures only 
with great difficulty* In addition, restoration of true 
values by means of figure elements is possible only to a very 
limited degree, 

Sd, The basic hook with unsystematically arranged figures . 

The position of the individual figure, iteoe within the 
basic book is selected on a purely arbitrary basis, both as ' 
regards their figure value as wall as the intervale between 
adjacent figures. 

Example of a' hatted arrangement of figures* 



Both the resognition of. figure items and their inter¬ 
pretation entail considerable difficulties. Similarly, it is. 
impossible to reconstruct the true values on the basis of 
tbs figure^. 

Such basio books, however, occurred bt£ rarely* they were 
always of Small also. 


,c. With regard' to their Internal structure, the following, 
distinctions may be made* 


aa. The baeio book without special sections . 

These are primarily strictly non-hatted data, which 
must dispense .with all special sections on acoount of the 
principles on which they are constructed. r 

bb. The basio book with apodal sections . 1 

Host basic books have, generally on the last pages 
a smeller or greater number of speoial appendices. The. 
following kinds of speoial sections have been observed* 
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Figure items, 

Nonas of months,. 

■ . Tinas, ... 

Punctuation. merles, 

Switoh groups, 

Addresses and signatures'. 

Units, 

i/eather items, 

Type designations (aircraft, engines, V/l, arms, 
ammunition, wireless stations etc). 

In extreme oases a basic boolc may oonsist exclusively of 
special sections; to all intents and purposes it is 'then a code ' 
(SIGNAL) table. 

• ’ It is often extremely difficult to Interpret the -. 

■ items of suoh speoisl BeotionB with exactitude. 

d. The following group of basio books oan be distinguished on 
the basis of the structure of the different basic book items: 


The basic hook with 


Every item in'the basio book has one meaning, i.e, in one- 
reciphenoent, a given cipher value will always have the sain 
meaning. 


Such basic books were the rule before the war, but of latter 
years they are being used less and less.' ~ - 

. The frequency cf a group in the statistical picture la the 
trua one: if a cipher group occurs often, tills means that ■ 
within the cipher text one and the same signification has in 
foot been enciphered that number of times. 



The basic book with items, alj of which have several meanin 


Every line of the basio book has two or. three meanings, i.e, 
every aipher value dan have two.or three different interpretations 
according to its position in the message. In such a oase, 
however, the actual meaning of. every aipher group must be 
guaranteed t 6 the decipherer by inclusion of special switch 
groups. , 



The following switch groupshave oocurred in basio booksi- 



- "Bead the whole item",. 

"Bead only the initial letter of the item", 

- "Bead the figure value of the item", 

- "Bead the left side of the item", 

- "Bead the. right side of the item”, 

- "End of lettor text", 

- "End of. figure text",. ' 

Sometimes the above meanings are varied: 



- "Read the initial letter'or figure", 

- "End at letter or figure text". 
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The amplifying groupa required in the hesie book can 
have either one or several meanings, ■ xf one meaning, they are 
fairjy easy to find and inteipret. If they have several meanings 
(and on occasion they were found to have 30 - 1*0 meanings) 
identification is very difficult - in so far as the nullifying 1 
groups are not Systematically arranged in the basio book 
or else according to set rules or arbitrarily. 


Emjn ple of an item with several meanings. 
1st Variants 


p ■ 


p ■ 

ocuSoTo, 


piatfUO 


on. Due.) 

_ 



ui casio oooJc are divided into left and light halves. 

The left and right halves have different significations, but .they 
are mostly in some sort pf relationship; for instance, the initial 
letter of both signifioations mey be the seme. The corresponding 
amplifying groups must be.- "Head the left or right aide of the item." 

Exejjjls of an item with several meanings] 

2nd Variants 



The rove of the.basio book are apparently occupied by one 
signification, but by using appropriate amplifying groups it is 
possible t o read the whoie item or only its initial latter. With 
this type it is therefore possible to assign several meanings to 
one letter. ' ' y 


The number of. items of a basic book can bo doubled or even 
trebled by the introduction of items having several meanings. Thus, . 
with three-figure groupafor instance, it is possible to express 
nearly 2000 of 3000 significations in a simple form, 1 or oorrespond- 
ingly fewer oonoepts in ocnpoaite form, instead of a ma^mum of 
1000 significations as hitherto. This naturally distorts the 
.atatiatioal ploture and makes it less suitable for cryptographic 
investigation, because on the one hand a given cipher group loses 
its absolute meaning, while on the other hand a given signification 
(especially letters) can be expressed by a more or lsss large . 
number of different aipher groups. 

This t.,pe of basio book oame very muoh to the fore during the 
latter years of the war. 

e. The two following subdivisions may be made oh the basis of 
the frequency of identical'ltemB in a basic books . 

aa. The basic book in whloh only one' item is used for a.given 
signification. 

Every signification ooours only onoe in the basic book, i.e. 
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the eignifiaatlari " ai ror sf t" or the' letter "B" are entered 
only onoe in the bocfc. 

In- this ease the atatiatiaal pioture is dear and 
unanfciguous, eo long aa no oonplioated reciphering 
■, subsequently blurs it. 

.The baeio book in whloh several Iteaa are used for a - 
aivori signification . 

In order to confuse the Btatlatioal pioture, significations 
in aomaon use are inserted several times in the basio-book. 
ThiB applies particularly to frequently reourring letters 
and to short words, punctuation marks, figures and 
amplifying groups.. 

For multiple enciphering of letters, however, the above- 
■described basic book with itema, all of which have several 
meaninge (enciphering of initial letters) is used with fax 
greater effeot. 

„ Tt *° ke9 P a tB * lines of ths basic book free for new 

—££• Added items naturally spoil the alphabetical eequanoe ofTfcems 
in nonhatted baaio booka to a greater or lesser degree. 

■ -® 1 ® above-desarlbed kinds of baaio book a an of course' occur in 

Qonhlned forms. See the ohapter entitled "Examples of SOVIET Air 
Force oiphar systems." . . 

■ w 2r« at majority of basic books of normal site (500 to 

iptio itema; it is impossible to discover the individual item from the 
baalc book unless the corresponding redpherlng rows have been pieced 

i bMio book - i * 0 ' Item Is not yet indicated in the 

baaio book itself by a figure value; it is not nuahered. 

5. Separate code tables . 

a - Coding table for addresses.. 


At times speoial ocver-tsbles are used in a large unit (neatly. 
an Air Amy) to. encipher addresses ana signatures, ana this independently 
of the actual emiphering of the message. 

; Eeoiphennent of individual table itema does not as a rule oocur, 
or if so, only very rarely. ' ■ 

■ Interpretation of .those address cover groups < oan be done by 
Of the contents of messages already broken, but the interpretations 
ore not always vary precise. 


Example of an address cover-tablet• 


(to the) 
(to the) 
(to the) 
(to .the) 

(to the) 
(to the) 
(to the) 


AOC Air Army. 

Chief of .Staff of the Air Amny. 
Director of Supplies of the Air Amy. 
Director of Signals of the Air Amy. 
eta, 

AOC Air Corps 
AOC Air Division 
OC Air Regiment 
etc. 




Ifif SE C RET —"TT 


20 


TIQCBt/l-120 



366 

368 


The (to the) 00 RAB» ■ 

The (to the) CO of the BAD* 

■ eto. ■ ' 

[True: * ROSSIAN abbreviations} 


!>• The 'Qoding table for a/o tvnaE . 

Similarly, aircraft typee were also enciphered according to a 
special table. This table, however, wee valid everywhere at the front. 


These aircraft cover groups were used not only in stereotyped 
strength, returns but also occasionally in messages enciphered accor ding 
to .a regional cipher system. 

These tables also were realphered only at rare intervals sad 
then non-hatted or partially hatted rows were often used. 

Theee tables were broken into direotly through the ocoplete'text 
of a broken message or else by means of the files of the- evaluation 
department. 


6. Proformas 


For enciphering stereotyped reports, so-oolled proforma sheets 
( proforma No..,..") were used; they were valid looally. 

In the first place they concerned the following types of report: 

Strength (personnel), . • 

Strength (aircraft), 

Strength (i^T); 

Movement of fuel. 

Movement of AununitLon, 

State of Airfields, 

Medical condition of the men, etc. 


The oolunms of the proforma are hunfeered in sequence, the report 
values (mostly figures) ere given in dear, ‘only words snd sentences 
are enciphered, often by the regional enciphering method in force. 

Pop differentiating between various proformas within a district, 
they are given a aerial nunfcer; ' sometimes they are also announced by 
a special cods group, either alone or additionally, 

• i 

’ Scample -of an aircraft strength return: 

Proforma No. 5 (aircraft atrenatha) 


1 ' 

Unit number 

' 27.AF/29.AP 

2 

Total number of aircraft 

29 

32 

3, 

serviceable: 

25 

24 

4 

Type I, 

23 

20 

5 

Type II, ... 

2 

3 

6 

Type III, 

. 0 

• 1 . 

7 

uneervloeablei 

3 

4 

8 

Type I, 

2 

V 

9 

Type II, 

' 1 

cf 

10 

^P® HI,. 

0 

0 

II 1 

under .repair away from unit: 

1 

4 

12 ' 

Type I 

0 

2 

13, 

Type II, 

.1 

1 

14 

( Type.III 

0 

1 ■ 



Olpher message: 1) 27 , 2129, 3) 25, 4)23. 5)2, 6)0, .7)3, 

8)8, 9)1, 10)0, 11)1, 12)0, 13)1, 14)0, 1)29, 2)32, 

. 3)24, 4)20, 5)3, 6)1, 7)4, 9)4, 9)0, 10)0, 11)4, 
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Example of a report on the'state of airfields: 

1/ Airfield aooording to map grid or enciphered 
according to the method in use by the unit] 

V Slse of airfield (total), 

3/ Sise of runway, 

4/ Serviceable cr ndt? (clear text or cipher). 

Cipher- message: l/46355k 2/l0OCbc8OO 3/200x40 k/net, 
lA9512u 2/1200 x 1000 j/l50 x 60 Vda, 

' The working out of profoxmaa was the task of a small group 
of workers in tho Evaluation Department. The personnel, however, 
were mostly from the oryptogrephio departments in addition, 
cooperation between these men and the cryptographers was of the 
Closest for teobniaol .reasons. 


7« lettered coordinates . 

There were both general and regional lettered coordinates, 

Their contents also were handled by the evaluation department. - 
The author remembers iso'details. 

The recognised specialist for lettered coordinates (and for. 

» proforma reporta) was Reiohsengeetellter* (later Reldwebel) Paul 

KAHML31,-who handled these branches. In the course of his duties 
'• with 11/353 in a manner which was a model for the whole of the 
east and which has never 'been surpassed. K. entered the hospital 
at 0KANIENBA0M near DESSAU a few weeks before the surrender, 

Buffering from bipod poisoning; the author knows nothing of his 
fate, . ■ 

* ‘ • 

8.‘ Meteorologloal oinhers . 

Be fore the war the SOVIETS enciphered weather reports aooording 
to the COPENHAGEN cipher. During' the war, however, .it was in • 
addition reqlphered with a sub tractor table whiah permuted every 
six hours by hatting the table columns; furthermore, the starting 
points in the table were similarly altered 

The subtraotor tables were changed at irregular but short ' 
intervale. ... 

* . I. . . 

The Listening Service in the east was never concerned with 
breaking ’these speoifiq weather messages. This was the task of the 
Director of' Meteorological Services with the Ope. Staff (Ob.Insp. 

, NAUMANN tt . ARNDT). . 1 

Only in 1944 was a planned deciphering of interceptedL ' 

• meteorological meesagea instituted at the request, of the LQFTKUJTTSfl. 
This was done in the Abtellungen of Regiment 353 by one or two 
’. meteorological cipher personnel belonging to the Director of 
Meteorological Services. The six-hourly permutations were dealt 
with exclusively in the Director's offices and regularly broadcast 
to the Abtellungen. 

The meteorological group in each Abtellung was likewise ' 
subordinate to the evaluation dept. 

,[Trns.* a grade of oivll servant.] 
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The .basic cipher ie determined by its external form end by the 
eom total of 15 items. If those item are numbered ri$it throu gh * 
end the oleor text la then enciphered with these baeio figures/the 
aum of auoh figures (the statistical picture) yields a fairly accurate 
-picture of the baeio key. External form and. oontenta ooa be ceen 
as it .ware thinly disguised by a veil. 

All reciphering therefore has as its purpose so to alter the 
enciphered text that not only are oertain figures replaced by others, 
but bo that the statistical pioture of the final cipher text shall i . 

1. disguise as far as possible the true form of the key’ 
used, end 

2, break up the frequency of the original language as 
radically os possible. „ ■ 

To rohieve this obJeot, the SOVIETS use the following kinds of 
aids to rociphering; ■ 

1. reoiphering rows to place, alongside the .text, 

2. substitution tables, 

3. adder tableB. 



In the aase of most SOVIET olphen; the various items are not 
esignated by basic figures. To read off an item in such oases one 
“wst jjlaae alongside them all neaossary reoiphering figures or else 
vrite. them in, 

, In the oase of small keys it is common practice to write in tbs 
correspondingly abort reoiphering rows in the appropriate squares of 
“y and *o erase them after use or when they have lost their 
Ihis method, however, is practical only whan each 
re alpha ring method is in use for a long period (aay 2i, hours) end 
when it cannot during such a period be replaced at will by other 
methods. 

If, however, the key is a oonprehonaive one, • the nimber and 
length of reoiphering rows ere considerable end ahangea in 
reoipharing must frequently be made, then a whole series of 
raoijpherlhg rows is gene roily prepared-in advance for a given 
period. These series of rows are then-applied to the original cipher 
datai according to the existing rules . The SOVIETS call the series 
of.rows "wkladyohi". 

Apart from' the nunfcer of. symbols in the individual members of 
® row, -the following rows may be distinguished: 



oontlnUally ascending: 25 26 27 28 2? JO 31 32 33 35 36 . 

etc. 

continually desoending: 81 80 79 78 77 76 75 7 * 1-73 72 eto. - 
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in aspending aiitfasietioal 
progression: 15 20 25 30 35 40 4.5 

50 55 eto. 

in daeoendlhg ari.thmetiaal 
progression: 77 66 55 44 33 22 

.11 00 

’ S£j, The partially eyatematio row . 

Kxamplea 

asoending in irregular intervale: 

04 06 07 11 14 21 26 23 30 39 eta. 

descending in irregular intervals: 

75 71 69 66 65 64 58 52 47 eta. 

1 

Unsystematic) rows with syatematio fragments: 

• _ 11 12 13 14 15 77 66 55. 44 18 16 22 24 

■26 28 eta, 

00 . The unsystematio row . .■ 

With suoh rows, analysis falls to disoever any 
obvious faota. 

b. When comparin g rows of the same kina , l.e., suoh as are 
intended for the eeme raoipharlng process, in regard .to their 
mutual relationships, the following poasibilitiee ooaur: 


aa. The roue are 


permuted. 


All roes are only ay alio permutations of a single noir. 


3 7 2 6 8 


Baaia row: 
Permutations: 


0 Wk 3 7 2 6 8 1 . . 

94 3 7 2.6 8 1 0 
i/3 7 2 6 8 1 0 9 eto. 

If one row of the series is available, all other permutations 
oan be reoonatiuoted fipm it,' When re oona true ting a new 
row only one value is neoessaxy to get out the entire row. 

The beaio row oan, however, have more elements than the 
normal reoipherlng row. 


Basic row: *27 44 28 56 03 81 63 00 74 92 93.48 50 

Variants = reoipherlng rows: 

. 03 Bl 63 00 . 74 -92 93 
74 92 93 48 50 27 44 
50 27 44 28 56 03 81 .eta. 
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bb. The raw hang to gether avsta mM-Hn«.Ti„ (marin B^ageg} 

Ihe rows of a aeries, may not hare the earns value in the 
seme position. If for instance the initial figure of a row 
is 7 , then no other row (i.a. in practice not more than nine) 
may have an initial figure 7 . ■ ' 

Example of a magia square (Latin square (STSTMJUAEBAT)): 


0 

1 

2 

3 

4 

5 

6 

7 

8 
9 


In this oase the rows of a aeries oannet easily be deduced 
from one single row, but reaonstpuotlon of a few rows is 
sufficient to facilitate the task of finding the other*, 

00 . The rows are independent of one another . 

The only common faotor is the winker of members, 
otherwise they are completely unrelated. 1 

In this case every sow must be discovered separately. 

ggpgarlng the Individual members of a .row on the basis of 
their validity leads to the following conclusions 1 there are rows 

with mashers having several values and. members having oniy one . 
value. . ■ 

ft u« Th e sow with members having only one value . 

All the rows given so far can serve to illustrate 
this form.' 

bb. The row with members having several values. 

In such rows the various items have no absolute value,. 
but several equivalent vulues. The individual values of.' 
a member of a row can be used indifferently when 

reoiphering. 




granule ; 


The 5 oolunns of a table are to be redphered by 
single-digit numbers. Since, however,' 10 single- 
digit number* are available, every indivi dual 
member aan be given two values. The row oould 
then be rendered os follows; ' 


5/7 1/9 6/8 0/4 S/3 


If the table has only 4 columns, however, it is 
even possible to give same lumbers throe values;. 


W 6 0/3 1/7/8 5/9 
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But If seVSrnj. ; .dajaoent figure values are ohoaen tb 
represent- individual members of the row, then one. 
eps aka of: " figure range" reoiphermant (BereioMa- 
ubereahlGaeeltnig). - - 

Bramplg of a row,in"figure rdafed* reoipherlng. 

86-97 41-52 07-15 63-69 53-62 23-26 16-22 70-85 98-06 27-40 

In this' row the values 63, 64, 65j 66, 67, 68 and ■ 

69 mould for example. be the reoipherlng figures for 
a single value of the key. ■ 

By the ut|e of reoipherlng rows with members 
having several values, the key itself appears larger 
in the ata^istioal pioture of the oilier text than 
it aotuolly it - the statistical pioture is thus mote 
or less strongly blurred. 

i*en qomparintt .different kinds 'of reoipherlng tore of a 
"ing eye tern, l.e. rows used for different, reoipherlng 
processes (e;g...one,row is used for redipharing the pages and 
ahothe# fob reaipheftrlg lihee), .the same observations as in - 
paragraph C may be made: 

aa, Hie town .dhh be built up out of one another, 

they are oyallh vaiifthts, 

bb. The - rowH - bang together in sitee Way, 

Example: while the 4-rows of a two-figure key 
ore road' vertically from alatn square, the 
B-rows' in the same square are read horizontally. 

oo. The rows ere oompletely. unrelated. 

Hie effeot of these alternatives on oxyptogrophy is the some 
as in.paragraph 0. * 

2. Substitution Tdhlsa . 

While the row is.planed alongside the key page and the idtter 
9 oh tains no. (basic) .figure values for its items, the neoassary 
predondition for rediphering by aubstitutlon table is the presence 
of such bpista figdr© values In the key page, 

. The items are firet of oil.read off from the.key page together 
wltii their, batio figure values and then these basia values ere ohanged 
according to a substitution-table, i.e. reoiphered. 

Example, of a substitution table. 



— £L_ 

1 

2 

_3 

4 

■ 5 

6 

7 

a 

9 

0 

nr 

12 

68 

46 

r 55" 

40 

r tJ7 

79 

38 

90 

1 

-U. 

W. 

..'.54. 

7M 

rye 

‘ 39" 

‘61' 

"34" 

-2? 

“50 

2' 

13- 

. 62 

_Q9_ 

.35 

66 

28" 

X. 

"84" 

ii“ 

"76 

3 

JAl 

-.91 

-1L 

60 

6o‘ 

02 

.67.. 

;;4C, 

XL 

."17 

4 

l?—\ 

m2 

87 

_26 

51 

3s_ 

33 

[_ 22 ' 

' 05 


5 

47 

88“ 

■-4L 

44 

-4 

81 

1 otj 

58 

J& 

49! 

"83 

6. • 

:k: 

01 

r jT 

" 32 

“SI 

~'7S'T 4T 

“Tt 

7 

10 

~sr 


■"20" 

Iqt 


.'56' 

25" 

“9£, 

“W 

a 

JSL 

l is: 


571 


tfc 

95 

□e 

|_jgj 

h ~77: 

9 

82 

21 

'156" 

4T 

78 

97 

192 

14 

27 

69 


When > reoiphering atngls-digit values outside the key, one speaks 
of a substitution row. 
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Example of a substitution row: 


figure group of the key: 01234-56789 
Cipher text: 7658 1 .9 4-023 

Substitution tables (or rows) are used only very rarely in , 
SOVIET methods and therefore need no further elaboration In this 
context. See description of the "okk-5" on page 37. 

3» Adder Tables . 

The use of adder reoipherlng was never observed-In purely air 
traffic systems. Only the general five-figure systems of the 
RED ABUT, which are also used by .the Staffs of the Air force, use 
this form of reeipherlng, ■ 

In reoipherlng with Adders, the cipher text whiah has been 
enciphered by using the basic figures of the key is re ciphered- by 
using the so-oalled adder: in this case the odder takes the form 
of a row of figures, in whibh the latter are grouped purely 
arbitrarily and In wtiioh the various adder figure groups do not 
reaur. 

Example of reoipherlng by adder: 


Baalq figure 

oipher text: 81024- 10231 67024.18729 56039 82465 67024- 56039 81024 

♦ adder; 70568 39084- 54022 77757 13900 57337 82582 02223 97574- 

final^olpher 513a2 W2l5 110i( £ 854-76 69939 39792 49506 58252 78598 

(obtained by non-oarxying addition 
of figdrea in the same colum). 


The frequencies in the basio figure text have been completely 
broken up by the adder; if frequencies ooour in the final alpher ' 
text, then in 99 oases out of-.100 they are "bogus”, i.e. identical 
oipher groups have different meanings. 

If the adder groups are added, to the basio figure text when 
enciphering, then these groups must be subtracted (non-carrying) 
from the dphar text when deciphering.. Conversely, if ttie 
subtracter^ groups wore subtracted when enciphering, they must be 
added when”deciphering. 

a. The adder table lfcioh ia used several times f "obal.1 bloknot") 

I 

It consists of a few hundred arbitrarily assembled five-figure 
groups (10x30); every Individual adder.group can be denoted by 
different oosblnationa of a two or three-figure number (the indicator) 
end thereby designated, aa being the initial group In the reoipherlng 
process . 

Every-adder table similarly receives Its own recognition number. 

Such "universal adder tables" were 'intended for' re ciphering 
several messages;. they usually remained In use for some weeks, during 
which time only the starting group was varied for each message. 



Doc ID: 6587327 


' • ■ 


• . 


-27- 

inaWi-120 


I f . a nuinber of messages were enciphered with tta. same 
adder table - even when different starting points were . used - 
it was possible to reoonstruot the table, thus providing.the 
necessary precondition for reeding the messages; The work was 
laborious but feirly meohanioal and necessitated very reliable, 
but not iMosaaarily qualified personnel. While at first (1939) 
a. depth of ,10 messages was oonsidered.'nsoe'ssary to 
' cryptographic success, one hod latterly to be oontent With 2 
messages - and successes were atill achieved. 

11 • The adde r table which is used once only ("indivlduajjcayd bloknot" ) 

■ Individual tables are Just as large as "universal" cobs but 
there are no indicators to determine the starting’ point. 


50(?) tables Ore made up into a "bloknot". The 
bloknot" ia given a five-figure identification group and the 
tables are timbered right through* 


. . Ewiy "bloknot" is, issued in two copies whioh are 

handed to the two stations Which are to encipher according to 
this "bloknot". After the reoeiving station has reoeipted a 
massage, both stations destroy the page used for enciphering and 
deciphering (both ocrpiea of whioii bear the same serial number), 
end confirm its destruction on the cover of the "bloknot", Tte 
purpose of this is in ail circumstances to prevent an adder 
being used twice. This rule was broken only in rare oases, 
o.g. in the Inst dtys of the siege of SEBASTOPOL, because the 
supply of "bloknots* broke down. On the whole, however, the 
supplying of all higher BJ's of the HKD ABUT with these "bloknots" 
has been a masterpiece of organisation. In spite of the 
obeolute security cf the "individual" tables .it must not be 
expected that the SOVIETS rely exclusively on individual.adder 
reqiphering, because the ciphering procedure is very laborious 
end demands staff having some degree of intelligence as well 
as practice. 

Sessile of a universal adder table. 


10 17 25 

173 28476 90436 38410 
935 98765 21415 33144 
855 35420 77685 I4466 

290 .. 

511 . .. . 

uswf .... 


31. -39 46 53 69 80 
33552 38496 22987 3Q416 77455 11100 
28490 46573 15146 33775 20495 31157 
87881 usw.* ..... ..... ... 


Trnei * The abbreviation "usw" ■ etcetera. 


99 

64599 

35746 
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0. 

workin ff «* all the .moessary data, auxiliary,means and 

* srsss*: seek ««■****> 

^ ■ jhfl'- Peolpharlng ariNtsm . 

The reoiphering. system is ,the name given to the whole cff 

Sve^st !™^? M °® 89 f3r/o*- oomplstely reoiphering a 
® including the instructions f or the various 

ProoffSB®. the way of reading oipher groups, 

Up tha indioator and determining its position 
; for Se uS fl rf“3*/ or ° hanging ra ° ipherln8 ^ ta ^ : 

a. The prooesB nf rablpfaerW., . . 

D ?? a 1 between simple and multiple 

■ ■ ciphering according to the number fcf processes involved. 

.aa> Siaoie reoidhe^p. 

one lt s” d Df J r ?“ 1 P heriri e» tho key ie altered by ’’ 

process only, and thus by, means of a single reoiphering 

gUMHJSi . 

1 * A, 1 ° * ^0 table is rtoiphered by altering the ooluona 
the tables this is done by placing alongside a > 
rf 10 two-digit members. The lines 
retain the values inscribed in the table. 


s 









jjjjf 

IBB 

bb 





BB 



'■li 

I bb 

BB 

1 

BB 

BB 

BB 

BB 


■■ 

BB 

1 

BB 

BB 

BB 

BB 

BB 

.BB 


B| 

»B 

BB 

BB 

BB 

BBI 

BB 

BB 

BBI 

BB 

BB 

BB 

MB 

HB 

BB 

BB 

1 

BB 

BH 

BB 


BB 

iHJ 

■■ 

■■ 

1 

1 

S 

1 

1 

wm 

1 

5 

S 






a 

s 

a 


2. A itO-paga code book is altered by reoiphering the " 
pages bj means of an unsystematic substitution 
the AB -values of. the oipher groujs); 
(lines) remain as unaltered baaio 
values of the code book. 

Ik- Multiple reoloherinfl 

either ltem iB stored by several processes; 

r rcwa «* available as there are processes 

St&i f rtfr “ 19 lasa ' ia whi< * “ itSr 

s^sTS?^'■£*» <**™****~. *u 



Doc ID: 6587327 




't 

-gepaKOEBB im_ 

EXAMPLES: 
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1. In a four-figure method (tho oipher groups are 
then usually called "ABCD") the A-valuea 
(i.e, the pages) are, altered by means of one 
reiophering row, the B-values (i.e. the 
quadrants) .by mans of a second rear and the CD- 

■ values, (i.e. the lines) hjr toe ana of a third row. 

2 . In another four-figure method both pages and' 
quadrants are reciphared by means of the same row, 
while the lines are reoiphered by means of another 
row. 


While in the first example, the number of processes 
equals the number of rows used (3 t 3 ), tho eeoond 
exon^ie again involves three processes, but the use 
of only two rowB. 

The higher the number of processes and the greater the 
nurnuar of reoiphering rows used, so much greater will be the 
divergence between.the statistical picture of tho oipher texts 
and that of the (fictitious) basis figures of the significations 
in the code book,- i.e. the more difficult the cryptographic 
process will beoome. 


h * She series of raolpharlmi; rows. 

All the rcea used in one reoiphering process are grouped . . 

together in series, and eaoh row is given a recognition number. 

.-risen dealing with a basic-rew or an adder table,'however, every possible 
starting point must also be determined by a recognition number. 

Examples: » . 


1. Series of 10 rows, each with 10 single-digit elemental 
Recognition 
number 


0 0 4 5 9 6 

1 •'5 0 3 2 

2 0 4 5 ' 1 6 

3 9 5 8 1 0 

4. 0 12 6 9 

5 7 3 0 9 ' 5 

6 71054 

7 1.8 9 3 2 

8 3 7 0 8 4 

9 84632 


7 3 

4 7 
3 8 
2 4 

5 8 
1 2 
2 8 

6 7 
6 2 
5 7 


8 2 1 
9 8 6 
927 
7 6 3 
4 3 7 
4 8 6 
9 6 3. 
0 4 5 
9 '5 1 

9 10 


2. Basic row.' 


81 7 3 65420 

Starting reo- 75 1 2 3“—4” 5 ' 6 7-ST 

ognition nun- 
,ber. ■ 
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Tbs ahoioa’ cf starting point aan be expressed 
either'by the figure-value of the first element 
of'the row or else by apeoial starting 
' recognition numbers whioh naturally, do not 

agree with the figure value of the 
corresponding element of the row, nor do 
they need to agree, in'the first oasa, the 
starting recognition number for the re* , 

/ • t 

' 7 3 6 5 42 0 9 8 1 

would be "7"» in the second case it would be ■ 

" 2 ".. 


2. Change of Reoiphering Tables 

The purpose of a change of reoiphering medium is.to 
break up the mass of material enciphered according to a given 
method in order as far aa possible to render more difficult or 
even altogether impossible a statistical comparison of the various 
sassages. . Therefore the more frequently the reoiphering medium 
is changed, the more difficult will the breaking process 'be. 

a. infrequent change of reoiphering tables 

In the case of infrequent change, vis. about every 24 
hours or even leas often, the reoiphering tables are 
generally laid down in advance by the superior authority for 
v a period of a week or a month at a time; This means that 
the individual cipher uessage need not oontain any special 
indication of the reoiphering medium chosen. 

b. Frequent (individual! chance of reoiphering tables . 

Xf on the other hand the reoiphering table is to be changed 
- often, say for every message, the encipherer is enabled quits 
independently and arbitrarily to ohose a reoiphering table from 
the system at his disposal. This 'entails the necessity of 
advising the station at the other end of. the reoiphering table, 
-used by including a special key group, i.e, the indicator, in 
the body of the tries sage. 

This type of reoiphering has triumphed in the latter years 
of the war, whereas before the war long-term reoiphering 
tables, i.e. such as were laid down beforehand and not 
indicated in tbs massage, wen in general use. 

o. Qhanpje of figure values in thB reoiphering greten . 

If the reoiphering system is in use for a. fairly long period 
the figure values of the different series of rows are 
..altered at given intervals, mostly onoa a monthj this does 
not involve ary change in tha general working instructions 
for tha reoiphering process. 

After a certain time has elapsed tha available, rare do not 
ooinoide with the message indicators and they must then - 
be built-up afresh.' 

d. Change of reojpheging system 

It was repeatedly observed, especially In the oase of the 
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southern Alt Armies, that after a eysteto had been lii iue for 
a fairly long time* .the key data did indeed remain in force 
- but the deciphering system, had been so rbdioally altered 
"that it was several, weeks before’ both sets' of key data were 
eeen to be identical, Even externally'the bhangs was- 
very corked; .thus.for instance, messages enciphered by 
naans of a --1(S0O-itein loe£ appeared in four-figure groups, 
than the reoiphering system was sb altered that the method 
assumed a three-figure iaspeot and finally, due to a fresh 
bhangs of reoiphering System and to the introduction of two- 
figure dutiudjSB,' a fiveufigure method was developed; 

This faot demonstrates how very inadequate is the 
blasaiflaation of SOVIET methods according to the 
appearance of the cipher groups. 

3. The key group (the indicator) . 

' The recognition numbers' of all the rowa, tables, and sooa- 
,tinea starting points used for One reoipharnent are combined in 
a so-called key group or Indicator.according to a prescribed 
system. 

a. The indicator in the alpher message ... 

I 

The position of the indioator in the dpbor message 
is presoribed and is generally invariable for a given system 
Otily .with the five-figure adder messages sent before the . 
war (general "bioknot*) was the position of the adder 
starting group iii the message, changed daily (ist-IOth . 
position). 

The indioator ia .normally placed at the beginning 
(preamble of the message or in one of- the first positions 
in tha body of the oipher text) of at the end of the 
message. 

Sometimes it is repeated as a safeguardi then it 
may be plaoed both at the beginning and at tha end of the - 
message. 

In order to disguise the indicator, at least to some 
extent, the number of its figures is- made equal to that - 
of the cipher groups. Furthermore, the equivalence of two 
indicators can be very strongly' disguised by using 
dumiea fraj or by allotting certain values to sqae or 
< all Indioator figures. . 

t , 4 

b. Me thod of- reading the indioator 

The indioator is usually feed in the seme 
way as the other oipher groups. Thus if a oipher 
group is reod.ADBO', the indioator is read in the same 
manner. 

■ l 

The methods of reading may, however, be different. • 
Then the relationship between oipher group and Indioator 
is considerably blurred. In poms particularly complex 
oases it is possible unequivocally to interpret the 
indicator only a .long time.after recovering the relative 
or even the original key data and after recovering a 
fairly large number of reoiphermenfca. 
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q. Composition of the indioator 


In most oaaeu only one indicator la needed; 
exceptionally two key groups ore used to determine the reoiphering 
process. 

Examples fob the build-up of indicators; 

1. ABCD (4-figure method) 





AB « serial number of the page-reoiphering row (two-digit) 
0 = " " " " quadrant row (single-digit) 

D = " " " " line row (single-digit). 

2. ABCD . 

A = serial number of the page row (two-digit) 

B ■= dmasy • 

C = aerial number of the line row (single-digit) 

D = " * H " quadrant row (single-digit) 

■ 3. ABCD 

A = serial number of the page row (two-digit) 

B = " " H •" line row (two-digit) 

GD ss dummies 

4. ABC 

, AC = serial numbers (within the given range) for page ■ 

and line (the same row) (single-digit + single-digit) 
B'= serial number of the quadrant row (single-digit). . 

5. ABCD 


AD = seotor number for coupled page and line row 
(single-digit + single-digit) 

BC = sector number for the quadrant row (two-digit). 


6. ABCD 


A a serial number of the quadrant row (single-digit) 
B b lino rew = starting point for ths . . . 

quadrant row (single-digit) 

C = page row (two-digit) 

D = d owry 


. 7. ABCD ABCD 

ABO) seotor number for the page 
CTD.fi 1 " nun lino 

ABI2) . * " « ■ quadrant 

CD(2) dumpy 


(two-digit) 

(single-digitV 
(single-digit) ■ 
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4« The Pudgy , 

To confuse the eneny and to .render breaking more 
difficult, cipher groups and .even indicators are padded with 
figures which have no,significance and which need not be taken 
into account when deaipnering. 

Sometimes indeed one element in the cipher groups oan be 
deleted when it 1 b not a pure durnty. but has been put* in solely , 
for Checking purposea. These are oases of so-called checking 
figures. 

Example of checking figures: •. 

The 10 columns of a table"are reciphered with the 

following row of figures; 

.00 16 25 38 4? 51 63 74 . 89 92' 

The A-vaiuea of the two-digit reciphering figures aaoh 
occur 'only once in this row, similarly the B- values. Henoe the 
■ B-values are merely checking figures for the A-values 
: coupled to them (or vioe-voraa).- The B- values therefore 
serve only to identify or to nullify errors in reception: 
they oan be cancelled without further ado. 


5. 

In simple systems the aipher group is read quite eimply 
from left to right. The value of the first element in the group 
gives the reciphering figure for the largest subdivision of the 
reoipherlng data' (the page), the last figure gives the value 
for the smallest subdivision, i.e. the line: . 

The more complicated the typo of reciphering, the mow 
irregular and "ora^y" is the kb thod of reading the group. 

The method of reading the aipher group 1 b indicated by the 
first few aapital letters of the Latin alphabet, where A always ■. 
Btands for the first.element in the group, B for the aeoorid, c for 
the third, D for the fourth ahd E for the fifth. 


Method of reading the oipher 


(the indicator) 


Examplea of formulae for the method of reeding: 



A(paga), B(quadrant), GD (line) 

AD(page), B( quadrant), G(lina) 

= A(page), B(quadrant), c(Une), DE(dummies). 


CIIHER SiSTilB CP THE SOVIET AIR FORCE 1937-1 





Until about 19W> it was hardly possible to-tajek - 
of - special oipher methods of the SOVIET Air ptproe, 
because the . air units were purely arny flyers 
and subordinate in every, respect to the arcy. 

For this reason the Air Force was in the same 
position as the any units, even in rospeot 
of its supplies .of oipher material'. 




3!OF SBBggg "tf 1 


-3V- 


TXCOM/X-120 


A. 1937r*1939 

The volume of traffic was on the whole not large and 
increased only during the periods of the spring manoeuvres and 
of the autumn exercises. But in any case the amount of 
treffio intercepted was unsatisfactory owing to the somewhat-, 
unfavourable locations of the German Listening Stations. Even 
so it was possible to. work out a very valuable picture of the enecy 
situation on the basis of the material broken. Treffio 
analysis hardly played- a part during the first few years: it 
was of little value in view of 'the intelligenoing of the 
taotioal material broken and aannot he compared with the 
suooesses achieved by treffio analysis in the West, 


1. Practice Messages 

It was possible to olassify as purely practice 
traffio a considerable proportion of the messages intercepted. 

a, Nonsense practice messages 

Many practice messages were-recognised as nonsense 
messages on the basis cf their stereotyped composition - 
(standard number of groups, systematic composition of 
individual groups). They were also frequently designated by 
a cede group in the preamble or at the 'beginning or 
end of the message ("uB", 01234, 56709 etc). The 
apearanoe cf the various groups of a message varied:.two 
to six-figure groups, four and five-letter groups. 

Sometimes it was possible to deteot relationships u . 
between the figure messages, practice' tables were 
successfully reconstructed; from these,-individual 
. practice messages could he read off. The method 
of reading was determined by an indicator. 

b. Taotioal -practice messages 

Tactical practice messages were in evidence among 
the traffio cf all deaijtfiered system • These messages, 
too, were identified by the group "uB" in the preamble 
or by the inclusion in the enciphered text of a suitable 
indication. 

In the oase of material used on'manoeuvres, there 
were messages containing stereotyped■£sots and oaaee, 
and these kept on recurring. Thus exactly identical me a sages 
appeared on two or' thrte different manoeuvres, it 
' oust be asBumed that there existed a manual containing 
standard taotioal texts and that this remained in use' 
for a fairly long tics. 

2. The two-figure table in general use . 

A two-figure table in general use was, as’ laid dawn 
. in orders, intended In feet only as an auxiliary for enciphering 
contact traffic between.the wireless operators at the machine: 
this was denoted by the name originally given to it by the 
SOVIETS, vis. "persgcnrornoB tabiioa devurnogo radlata", or 

FT for short. - 
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But a largo number of.massages was enciphered by this 
table, which was the only cipher device available to a. large ' 
number of persons - even to CH'b, ana thus to the wireless 
operators themselves, it is not known whether this was merely 
due to slackness on the part of the responsible aipher officers, 
but this is not assumed to be the 'oaso.. Rather doea it 
appear to have been done on purpose to preserve the staff 
. method- (four-figure, see belcar)' in order by all means to avoid a 
. premature oengaromise of the latter.' 

The ET table consisted of 10 x 10 squares; most squares 
had two meanings; two switoh groups were used to indicate which 
meaning attached to the aipher groups. One af the switah groups 
controlled letters, figures and punotuation marks, the other 
controlled word and sentence items; the vocabulary was roughly 
the same os that, of the international 3-oode groups. ■ 

■The tables were in use for about a year "to 18 months. E'er 
examples, see next page. 

The tables were r&oiphered daily with two ten-element single 
. digit raws. Bath the horisontsl and the vertical rows were taken 
from the same Latin (magio) square. As a rule, each Latin square 
was in force for a month and had validity within a given military 
district. Very seldom, the rows from the system table were 
permuted cyclically (or a Isa the rows of many Latin squares were 
ataply cyclic variants), 

PT material oould as e rule be broken in its entirety. The 
security of the key was very low; it was mostly a case of staple 
letter reoiphering; thus to all intents and purposes the FT 
sassages were simple substitutions. The systematic relationships 
between the reoiphering raws of a military district could, 
provided part of these rows was available, lead to a more or leas 
. complete reconstruction af the whole Latin square. 

j, 1 Th e three-figure Air-gorge coda In general use . 

A comparatively simply constructed (lexicographic) end 
simply reoiphersd code-book was intended primarily for air to 
.ground traffic. This traffic was, however, almost never heard . 
on account of the short range of the airborne transmitters; 

In addition, this method was also used by ground networks cf the 
Air Poroe. 

As. far as I can remssfcer, two methods of this kind were 
used one after the other. 

. a. TheJ937-38 three-figure Air Poroe oode-book . 

The basis' of this was a oode book of 7 pages, each of whioh 
had 100 lines and alphabetical construction . 

The-pages were re oiphe re d by means cf a staple, unsystematic 
row;- ths lines (BO) remained constant. 

Cipher Baourity was correspondingly low. 

b t The 1939 three-figure Air gome, oode-book ( "BAB-39 ») 

10 page cods -book, each page with 100 lines also of 
alphabetical construction, with a few 1 email special sect ions 
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on the last page. The line nunberlng in the oode-book occurred 
three tinea; every row had a different colour (blank, red, green?). 
All three xdwb of lines were oyolia variants of me systematically 
increasing figure raw 00 - 99 , 

The pages of the oode-boc-k (not provided with basio mothers ' 
in iiie original) were reaipbered onoe:-for reoiphering lines only 
the appropriate aolour wns indicated, e.g. 

■ 3705 3'<>421 9 , green, 

oiphep security very low. 

o. The 1940 (?1 Air Forge oode-book . 

In a third three-figure ooda-book of similar construction,- 
the pages md the quadrants (b) were reoiphered in twp stages; 
tiie lines (c) remained aaaa tant. 

• kj The four-figure' staff method in general uae. eo-oalled "Oonaanders 1 s 
Code . " . 

In this method, more comprehensive oo de-books with about 5000 
items were used. They were also oonatruoted alphabetically throughout. 
Reoiphering waa done by placing alongside of rows or by means of 
substitution tables. These methods remained on an average In force 
for one year. 

- As a rule, the hew method was adopted for me spring .manoeuvres 
and used extensively only while they lasted. This short period, 
sufficed, however, for the method to he developed sufficiently to 
allow of breaking the traffic intercepted even at a laler date —' 
though at times with considerable difficulty. Outside me period 
of. manoeuvres, only an infinitlsimally email number of messages was - 
Bent, no doubt with the object of preserving the me-mod from being 
prematurely compromised, as already mentioned above. * * 

a. The 1937 four-figure method (celled "Privo” ! 

f 

Code-book 'With 50' pages, each of 100 lines-. Alphabetical 
. construction with a few special'sections on the last pages of 
me book, Figure items similarly at the end. ms oode-book, ' 
in ascending order, 

' This method was called "Privo", because'the highest number 

of messages was recorded on the staff networks,of me VOLGA 
military district: me messages were as often as not 
designated by the code-group "privo*. 

Page (AB) and line (CD) were reciphered by means of the 
same values j The basic numbers for the pages were 75-99, 

followed by 00-24; the basio numbers for the lines were 00-99. 

Tiro rows of figures were used ever; time for reoiphering! one 
row had the values 00-49 and the other 50 - 99 . - Furthermore, 
every row waa divided in half. , 




v . 
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The rowa ohoaen for reoipherlng ware determined-in the Baas age 
by on indloator, bat I am no longer familiar with the details. 

TfLth the small volume of traffla, the seourlty of this key ■ 

*m fairly hij£i: deciphering the messages gave m u oh trouble. 
Fortunately vary many separate .letters were enciphered In the 
texts; these stood out very ol'early in the statistical piature. 

b. The. 1938-19 four-figure method frick-S" 


This aode-book also had. 56 pages of 100 lines osohy its 
omstruation was alphabetical too; there were a few special 
1 appendices. 

The basic figures in the oode-book were reeiphered by means 
of substitution tables In two stages: AB and CD with the same 
substitution table. .. 

Every substitution table had a recognition number (a four- 
figure one, invariably with a nought in- the first position, e.g. 0451)• 
In most oases, up.to 10' tables at a time were Issued to the different 
military diatrials; their recognition numbers always formed a series, . 
e.g. .0450-0459 or 0780-0789, The table which had been used was 

indioated at the beginning of the message by giving the recognition 

nuntoer as indicator. 
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1 The substitution tables ware completely unsystematic and la. 
no nay interrelated. ■ 

Compared with the "Piivo" key, the seourity of "okk 5" was ■ 
indeed higher, yet if a few good cipher-messages were available, 

' the substitution tabled aould be rsaanstruoted in about 22f hours, 

. Its reduotion to basia tens presented no difficulties on aoacunt 
of its systematia oonstruotion, 

5.. The five-figure adder method In general use. . 

The foundation'of this annual method in general use by.hl^ier 
staffs was very comprehensive: the code-book contained 20-30000’ 
significations. 

Reclphering was done by applying an adder prooees to the basia 
figures in the oode boolc, . , 

Until 1939 the available five-figure material was so email 
that wozk on it aould not- go beyond a general analysis; it was 
hardly possible to make up adder series. 

■ ; 6. Proformas . 

, SucoesE'ful work on proformas before the war was considered 
impossible and unnetfassaxy from an evaluation, point of view: for 
this reason it was not carried out. 

7. Primitive oInhere. 

Primitive ciphers whiah often cropped up were an the whole 
probably illegal ciphers, i.e. unauthorized ones in use by wireless' 
operators and by certain HQ's. This material was evaluated but 
yielded no important results, 

i ' ■ . 

B, The Oooupstion of Eastern POLftHD by the Had Army in September 1939 

At the time of the OOaupation of Eastern POLAND and of the 
(admittedly sinall-soale) battle operations against isolated POLISH 
units, the volume-of messages increased vary considerably. 

"Okk-5" material formed the bulk of this traffia: it was 
broken almost 100$. • As before, five-figure material was too scanty 
for suoaessful exploitation. . 

She outcome of sucoessful cryptography was ■ a comprehensive 
study by CHI-STH2LE on the inoureion of the Bed Army: this contained 

a mass of important details and oonolusions, partioulaELy.ooapeming 

- the Air Borce,' and was greatly appreciated by the GAB Operational 

Staff. . . . 

0. The Wlntor Campaign in-FINLAND. 1939-40 

In a way, SOVIET wireless traffic may be ssid to have been 
. monitored "on a war basis" for, the first time during'the winter - - 

- campaign. The out-stations proved to ba too.weak to cope with the 

number of messages intercepted. Bor, this reason the moat capable 
cryptographers at out-stations were concentrated in-Section E 1 and 
' all uubxoken aatextal. -was sent by- t.l«n»rliit.r from the . 

out-atatlous to ‘CEI-STEtli'B. 
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I• Two and three-figure masaages . 

' The out-stations themselves were la neat oases able to deal 
satisfactorily with this material by themselves. Nearly 100$ b re a i rin g. 

Z, "Okk-5" messages . 

' Woric on "okk-5" material afforded no great difficulty either, 
although the number of substitution tables in use simultaneously 
increased considerably. But this material was In the main deciphered . 

, by the Section in bulk. The large volume of materiel made it possible ■ 
to reconstruct up to 95# of the code-book, 

: 3. The- five-figure method . 

Since five-figure material waa available for the first time in 
larger quantities, woric on it could be undertaken with some prospect 
of, success, A considerable number of these five-figure messages oould 
be broken, but often only after considerable delays this was entirely 
due to laolc of personnel (only one cryptographer with 10-15 key 
breakers without linguistic qualifications were on duty at any one 
time). ■ - 

t t 

Key basisi about 850 pages (ABC), each with 25 lines (BE). _ 

The code-book was arranged alphebetiaally. The pages were numbered 
-consecutively (from 100 to 950), -the line designations depended on 
the C-value; if C was oil uneven number, then all the lines on that ■ ■ 
page were uneven; if C was an even number, then all tha BE values' 
were even, nwSbora. * . 

l i ., 

Example : page 467, Lines: 11,13,15,17,19,51,33,35 etc. 
page 468, lines: 00,02,04,06,08,20,22 etc. 

This system waa probably intended to enable errors in 
reception and calculation to be detected. It represented 
' a welcome aid to cryptography. 

. Figures were not expressed by items in the code-book but in blear, 
prefixed by the requisite number of noughts, e.g. 57 ® 00057, 164836 * 
00001 &f836. *hen calculating adders, figures oould easily be 
identified since they were the only olpher group whioh failed to 
oonfom to the above-described system of CDE-valusB. In addition, the 
basia structure of the code-book oould be comparatively easily 
reconstructed on'the basis of the figure groups, since date groups and 
' unit numbers were usually interpri'tabls without .ambiguity. 

As a rule, universal adder tables were used'for re ciphering; 
individual ones only very occasionally. 

The unit number of the transmitting station was stated in dear 
at the end of the message. 

Address and signature were inserted in tha text of the message in 
any desired position before reclphering, e.g.: 

Example : . ■ , . 

, To-morrow morning between.1000 and 1200 hours ( T o 
the 0.0. 126 Air Regiment - A0G 4. Bomber »lvieion) 
the targets 'in grid^squareo 46322, 46414- and 46415 
are Id be thoroughly bombed. 
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.. D. Reor nlsatlon of SOVIET Cipher Methods on the.Basis of Br p-s'sj.-'- aobe 
- fa the Winter Oantpalgn' In FINLAND . 

'. . . ^ U8 6 splendid organisation bad to the wall-merited attention 

Trtdoh it raoeivad 'from the FINNISH ER’s, the highly Buooessful work 
of the FINNISH Listening Service was often suboessfully translated 
into notable operational achievements. 

This faot was of oourse sooner or later hound to heaoms app arent - 
to the SOVIETS also. A printed copy of working directions for SOVIET 
cipher officers which was -captured during the campaign in the East was 
■ comprehensive; .it studied the lea sons of the Winter .Campaign end . . 
very pointedly orltioieed SOVIET cipher behaviour. Many a FINNISH 
military success is attributed to the oaraless and inaoxxeot use.of. 
oiphers, 'Yet in these arguments, stress is laid first arid foremost 
on the loss of cipher data in the bat.tle line, on the transmission of 
messages in dear and on the activities of the FINNISH ABSHffi. Only the 
barest reference la mads to the possibility of ciphers being.broken. 

Be that as it say, the SOVIET Command decides on a revolutionary 
reorganisation of. ciphering systems. The result of this 'alreafy 
begins to make itself felt before the start of the Eastern Campaign: 
it creates great difficulties for the German-Listening Service and 
above all for cryptography, but thanks to the fact that developments 
had been "kept pace with" for a number of years already, it entails 
' no important or permanent aet-badks. • ■ . 

The reorganisation of the SOVIET cipher set-up may be'outlined as 
follows: 

1. . Abol ition of most general'methods - institution of regional methods. 

Enciphering according to general end comparatively comprehensive 
methods issued by Department 6 of the RED ARM! GHQ are abandoned, with 
the exception of the five-figure odder method. , , 

These few methods are replaced'by one (or even several)*original - 
-methods for every wireless network: such methods ore as a rule worked 
out by the oipher offioer of the mein wireless station. 'The subordinate 
cipher offioes merely give guidance by issuing directives in general 
terms and by holding courses for the ini tied, and subsequent training 
' of oipher officers. 

t 

Results: a. The supply problenris excellently solved by these 

new regulations: the delays in the delivery of cipher’ 
data, which had- been occasioned by the 'long lines 
of communication, ore avoided. ■ 

b. The oipher instructions can be very well adapted to ■ 
the special requirements of the separate networks. 

. This also enables the Air Faroe to introduce their 
own instructions with a specialised vocabulary., 

o. The cryptographer's task is rendered considerably 
more difficult by this new state of affaire. Evan 
• though the - separate regional methods become easier - 

by oonpaxlaon with the general method, the volume of 
traffic for each method is decreased to such an 
. extent that the method whiah in itself is. less - 
'difficult becomes harder to break than difficult, 
methods with-a large volume. Sitae the aunfcer of' 
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cipher eyetome to be worked cm aimultaneously 
is increased from about 5 to an average of 
100, the number of qualified cryptographers 
with good lingulatie qualifications must also 
be inoreaaed out of all proportion at the 
expense of the auxiliary staff. 

d. The identification of messages, which in 
themselves are enciphered according to a 
known method, is very difficult owing to the . 
extremely complicated and frequently changing 
system of call-signs. ... 

2 . Shortening of the period of validity of cipher system . 

While the general systems in use before the war were on an average 
in foroe for one year, the regional systems are usually superseded after 
about 3 to 4 months. Yet differences were in part very considerable: 
white-Same southern Air Armies in particular retained their systems for 
periods of up to a year also, other systems Were replaced after only a 
few weeks. 

Results: ‘ The period of validity was in-many oases so 

short that it became quite impossible to 
• work out the system while it was still in 

force. 

3. Coa mlioation of cipher instructions . 

■ Cipher instructions before the war ware In the main systematic, 
war-time methods, on the other hand, beaome even less so end less 
. transparent in their construction. Items with one meaning are replaced . 
by items with several meanings, enciphering possibilities for letters 
allow of multiple letter enciphering. 

* _ ■ 

Results: Identifications of new code—book iteme, decoding 

nnd reduction to basia values of the cipher 
instructions all present far greater difficulties 
than before the war. 

4, Complicati on of the raolnherlng systems . 

Uncomplicated realpherlng processes and'rows which are mostly 
syst ematic are increasingly replaced by complicated re ciphering systems. 
Row elements with several, meanings (seatox ro alpha ring) are used more 
and more frequently. ■ 

Results: Hie perfection of reoipheiing systems blurs 

the statistical pictures:, reconstruction of 
cipher instructions .and re ciphering ays terns 
becomes more difficult. 

5, Ousting of non-hatted systems . 

* * , 1 
The undoubted tendency to adhere to systematic construction in the. 
production of dpher instructions- and re ciphering aids is apparently 
consciously resisted and kept in oheak. 

Resultsi The number of "week spots" is reduced. 
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■ £»...ShortenlnH of the perio d of validity of reoiphbr keys, Intro duo tlon 
of "individual" reoinhor keys . - -- 

Eaoipher keys whioh Often ohanged dally end sen determined for a 
long time la advance are replaced by reoiph'ering media valid for' 
one message only and whioh can be determined arbitrarily by the 
encipherer. ' , • 

. Results: if the olpher staff writ conscientiously, the 
material for any one 'system ia very much split 
up, thereby delaying a break-in as well ae 
■ re00netruotton. ' 

7. Introduction of dumaloB . * 

The use of dummies too constantly on the increase. 

Results: The statistical picture ia subsequently falsified ' 

by being spbinkled with dummies. 

Abolition o f the two-figure tables in general use for wirleaa ■ 
operators . 

’ ■ ■ A* first the PT-tdblea beoome leas systematic in oo net notion, 
finally they ere abolished and the wireless 'operators are retrained 
to use international cipher groups with unlnqaortant modifications. 

Results: Th e 'di sappearance of these tables strongly curtails . 

SOVIET "Private conversations*. Apart from tbs fact 
that- a thorough evaluation of this material could 
lead to success, the disappearance of materiel - ■■ 

■"blah was exoollpntly suited for training future 
cryptographers la vary much to be regretted from . 
a orypto-teohnioal point of view. 

> 5s_Complication of the retained five-figure adder method in general uae ^ 

The five-figure, oode-booke were not enlarged but they were made * 
leas aysttoeitio, , The period, of validity of each code-book was much 
reduced. Reoiphering with universal adder tables was completely 
stopped. 

Results: Re alpharing with individual adder, tables, i.e. the 

feet that a given adder table is used onioe only, 
means 100$ key security. 

Khile in 1941 -.42, five-figure material could still 
satisfactorily, be read, successes after this time 
'became less arid less frequent proportionately to 
the disappearance of tables used more than once, 

■, In the end, work On five-figure material had to 

be abandoned by the cryptographers. Even so the 
interception of five-figure material was not stopped 
because keeping track of the indicators ("bloknota") 
had beoome a valuable basis for interpreting no two rite 
and aall-signs. 

10. , The use of machine oiphera . 

The use of maahine ciphers wan undoubtedly tried in individual 
, cases, but on the whole it failed to be adopted.' Thus at one tlipe 
five-letter’messages wore sent from besieged ODESSA. Analysis - 
revealed that a machine key sight be in use, but the. volume of traffio 

was too small for work on it to-'be successful. 

, • . / 
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During the laat few months the wireless traffJ.o of the Corps 
staffs of ttie ADD was also carried on according to a five-letter 
method, “uperfloial analysis led' ono to suspeot a maohlne method 
in this oase also. But here too, the volume and the' quality of . 
interoeptlon were unsatisfactory. 

or a oaptured cipher moahine was examined by the 
Main SIGINT Station. Obviously .the examination did not yield any 
results. 

11.' Int roduction Of transposition avutemn . 

_ According to a atatemant by the liaison:offioer of SIGINT Station 
2 with 11/353, fairly primitive transpositions made increasingly 
frequent appearances In any traffio In the spring of 1945. No such 
observations could be made In the case of the Air force until the 
time of the surrender. * 

In spite of the perfection of SOVIET systems as outlined in the 
foregoing, the results of oxyptogrephio effort up to the surrender 
were satisfactory.. 70 to 90JS of the materiel (apart from untouched 
meteorological messages and five-figure adder messages) could be ' 
read currently. 

In particular, the regional systems of the ground organisation, 
which were particularly important from an Intelligence oapaat, could, 
nearly always be broken. 

Successes in dealing with the keys of flying units were on the 
whole less numerous in proportion to the Volume of traffic available, 
but on the other hand the contents of- the messages were of lower 
intelligence value. 

f 

% 

• 17. THE MODUS QPBRASDI OP GAF QRgTOGRAiffy TW TTKfaT.TNG WITH SOVIET 
AIR FORCE gggTgjg . ' 

Preliminary note : An attempt has been made in thia section to describe 
typioal features of the cryptographers' modus 
operondi and of the various stages of their work, 
and to reduce these as it were to a oonmon 
denominator. The difficulty of describing a 
partially creative effort must-, however, be obvious, 

• A, Breaking a new cipher . 

. . i 

These notes are concerned -with the handling of SOVIET substitution 
systems. They oan ali be dealt -with together. Only the modus operandl 
with adder systems.Is given a short chapter on its own. 

i i 

1. Analysis of.the message. 

Counting the nunher of cipher groups, determining frequencies and . 
comparing cipher, groups In respect of their relative positions in the 
cipher text are the basis of technical cryptographic analysis, 

a. The statistical picture . 

The count of the individual alpher elements is made uniform 
- by the introduction of rules .which are in general use by »n 

cryptographers. In order to reduce the Wm* taken by this 
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pxoCepa, 9 number of different atatlatiool pro fomma have 
pesn adopted, 

b. Normal atatlatloai picture' . 

The first statistical prooeas. applied to a cipher text la 
unequivocally laid Sown. The result of this process la in a 
way the message's "visiting oard". The inflexibility of this 
process proved to be particularly important after the 
introduction of* rffgiotiftl method*, beoauso numerous methods 
cropped up simultaneously and all of them had praotioally tha 
same appearanoe. The number of elements in each, cipher group 
was vital for sorting out the normal statiatioal picture. 

aa. JfonnaT tao-flgura statistical plotura . 

The two-figure groups art written in a «n»n 10 x 10 
square in which the A-valua is read off on the left and 
the B-value on top, A stroke is made in the intersection 
square. 

Example ; ‘ ‘ 

22 45 83 01 45 39 00 22 45 83 44 91 39 
■> 83 23 97 eto.. .. 



bb. Form al three-figUra statiatioal picture , 

For three-figure texts a 10 s 10 sheet.of the size 
of the message form is used,. A-values axe read off along 
the top, B-valUes on the left.. The C-value is written in 
the interseotionsquare, A repetition of a group la noted 
by a stroke after the C-value, 


439 710 555 386 710 . 389 411 835 Tib 

\ 

989 716 369 002 536 940 537 + 

?or etatiatioal picture, see page 46 
00. Normal four-figure etatiatioal- picture . 

. a , 

The same.form is used as that described under para, bb/ 
but in this aase A-values are read off on the left 
B-values op top. The CD value is treated as one entity and 
inserted in the appropriate intersection square. If a group 
is repeated, this is indicated exactly as in. the aase of a 
three-figure message, 

0 

For atatlatloai piotun, see page . 47 
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Owing to their uhimportnnae to a fairly large hunker of 
workers, no hard and fast rules were established for dealing with 
five^flgure or any letter statistioal piotures. 

> 

3t deduction of the normal etatietioal pioture . 

■ The next task ia an attempt .to redune the alee of the normal 
-statistioal pioture on the basis of the observations .made. *his 
is done by taring to eliminate positions whidh have obviously been 
left blank, -One * deflates the balloon". .■ 

m A 

In addition, the etatietioal pioture is as far as possible made 
to conform to the presumed original," lie. to thaexternal shape of . 
the oiphor basin• This involved eliminating dummies, 

discovering and assembling values which have been variously reoiphered 
, and determining marginal values or "tie-ups" [Nahtetellen] of 
recognised eeotor' rooipharihgs. 


The nailing down and elimination of any indicators from the 
oipher text belongs to this prooeaa also. Figures in aleax in the . 
body pf the oipher text also disturb Ifis statistical reoiphsrlng' 
picture ana must be fanuVed. - 

Example i sea pages ij&'ahd SO 


.. 3. Stripping of reolnhera. ' 


Since the groups used in A single reoiphsrlng are insufficient 
for & further Buooeseful analysis of -the method, on attest ia «mda 
as early aa possible to reduoa various encipherments of a method to 
a 00union denominator, to collate them and to sssindlate them one 
to another. The moat distinctive.rebiphenaent ia generally used - 
as a relative basis for this. The*easier the re alpharing system, the 
easier the process of assimilation.. Measured by the standard systems 
of the. latter years, early asslmilationa were only very incompletely 
euooeeaful: it wee impossible to achieve oomplete fusion of all 
raoipherments and .partial -results had to be accepted, e.g. the 
correlation of page reolpherments but not of line reoiphermsnte etc; 

Errors of varying magnitude, cannot always be avoided in the 
assimilation process. For this reason it ia Apparent that the oipher 
groups of different rsoiphermenta can be distinguished one from 
another in & oombined statistioal pioture, oven subsequently^ by 
entering them in different dolours. 


Even when only partial eucoese ia achieved in this respect, it ia 
usually possible as assault to recognise the function of the Individual 
values of the indioatoze. But if these functions are known, then an 
assimilation of reoipharments with very colourless statistioal piotures 
will also be possible, solely on. the basis of the indicator.. 

Example; see pages 48-and 50 
4-. Breaking into the system . 

After having parried out the prooeaaea described above, a 
break into the cipher system was often achievedi the oipher 
material is no longer amorphous, and meaningless but already has. 


V- ' 
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Example' of a normal four-figara atatlatloal -ploture . 
Cipher groups: 2346 3485 2303 3523 4680 oto. 
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'a marked individual appeaxanoe. Sane. characteristics of the 
method can already be enumerated, even though the intexpretation 
of many an obaazvatiQn is atill obaoure; 

5. . Breaking into the oirher text . 

Non* is the .time to start trying to break into the cipher text, 
to read 1 fragments; then' the Interpretations, of the various items 
must be confirmed in another part of the message and. in a different 
' oonfclnatiOn, , 

In the oase of oode-books having items with two meanings (a 
letter and a word) it will be neoeasary to extract oertain switch 
groups and their interpretation and to Isolate, the pure letter 
, texts. Admittedly, thiB may be very difficult, especially when the 
j amplifying group in the key data have' several meanings and are 
used completely unsyetematioally. Sometimes, for instance, very 
frequently reourrlng amplifying groups act aa very troublesome 
duimry groups. 

, ' i 

.g.«_Hair..i nterpretation of items, deposing . 

Deooding beoomea easier in proportion to the progress made in 
dealing with the method in general. If ftor example the key basis 
is' only relatively worked out, deooding will of course be more 
. difficult than if the key basis has been reduced to its original wellies 
and it ia merely a oase of systematic reconstruction. 

7. Recovery of original basin book . , 

Even though it becomes possible to read other reoipherments also 
■Aen a.relative basis has been recovered, l.e, when a given 
reaipheriuent. has been decided on as interim basis, and even if this 
offers no great difficulties; recovering the actual original key baaia■ 
and the reduction to basic values of the relative basis,, are matters > 
of the greatest importance; not only because decoding win then be 
mush easier but because only then can different relationship* and ' 

. governing. Iowa in the re ciphering system become apparent at all. 

Every oase of conformity to a law in the oonstruotion of the 
original key basia facilitates i.to reduction to the latter: in many 
oases it 1 b this which first makes it possible. 

8, _ Recovering the - r e dphe ring s ystem . 

Oie systematic collection of all available reolfhexlng rows with 
their appropriate indicator values leads to the reoonstwuofcton of the 
entire reoipherisg system: interesting relationships and laws can' 
be discovered in the course of these efforts. 

9 Working out the system . 

Repeated work on the material already handled, whiah is of course 
still full of incorrect and Uninterpreted iteme, enables one to fill 
up gape in the key data end finally to solve all- questions regarding 
the original, the reoiphering system eta. 

" » 

Naturally, the practical pursuit of cryptography often enough led 
to more or lees important departures from the procedure described above 

Depending on the oharooteriatiaa peculiar to a given method, the 
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sequence of theprooosaeewas altered or else several processes wore 
carried out In parallel and simultaneously; in many oases they . 
were simply cmdtted, 

For the truth of the matter is (hat the olassie and scientific 
path, was in most oases shortened,, either by oarelessness in 
enoiphering on the enemy's part or by errors and weak spots in 
the build-up of his aipher methods. 

10. Naming (he systems which had been solved . 

. Even before' the war, every system dealt with and solved was 
given a serial number prefixed by the letters "R.CT (Russian Oode). 

As tiie systems remained In force for a fairly long time, however, 
their original SOVIET designation ooourred in some oontert or 
other in the text of a message: this designation was then adopted, 
within the oryptographio organisation. 

■It had beoome oustomary in the general reporting aet-up of the 
listening Servioe to refer to systems according to the nusber of 
digits in their aipher groups (three-figure oode; five-figure adder 
system eto.). As long as the number of systems in use simultaneously 
remained small there was no particular objection to this habit; even 
from the oryptographio point of vj.ew. But after the sharp increase 
in the nunber of aipher systems in simultaneous use, any division 
according. to the number of digits in the cipher groups become 
utterly meaningless. 

• The oosmonly-held opinion that.the seourity of a system and 
the importance of the 'mess ogee enciphered by its means depend on 
the number of digits in the aipher groups ("The larger the number 
of digits in the aipher group, the mors important the message and 
the harder it is to decipher”) Is only vary conditionally onrrect: 
for the number of digits can be increased by. the use of demotes, 
checking figures and unnecessarily high reciphering figures. Thus 
an increase in the nunber of digits does not neoessarily Indicate 
an increase in the sisc of the cipher instructions. But the 
seourity of a cipher by no means necessarily increases in proportion 
to the else of the aipher instructiona; on the oontrary it oan even 
be diminished. Thus for example a four-figure oode book with 
single reoiphering is easier to break than a three-figure table 
containing, soy 200 items, with oonpliaated reoiphering and 
unsystematic construction. In just'the some way It has been shown 
time and again that (he intelligence value of a message in no way 
depends on the degree of seourity enjoyed hy the system chosen for 
enoiphering it. It was for instance noticeable during the first 
year of the war against 'the SOVIET UNION that the five-figure 

messages, realphered hy means of subtraction and used even by 

higher HQ's, by no means■ contained the important revelations which 
had been expected; they were in. fact' mostly less important than 
the comparatively simply enciphered messages of any RAB. This 
caused general disappointment in Intelligence circles. 

Every oryptographio department on the Eastern front gave 
serial numbers to the systems which it had broken, independently 
of their importance, of the period of their validity or of their 
traffic density: an additional digit indicated the nunber of 
digits in the aipher group. 
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ExampleB i 

Abteilung I: VN (Northern aystanf-) 157/3 - the 
157 th method to be solved by the 
Abteilung (three-figure groups). 

Abteilung II: VO (Boa tern syetenP, from Wireless 
Listening Abteilung Boat) 12^/4 - 
• the 122nd method to be solved by the. 

, Abteilung (four-figure groups). . 


Abteilung III: VS (Southern System*) 77/4, eta. 

• 

Erery method 'wns at onoe reported by teleprinter or by wirelesa 
to the regiment, where It mss given the next universally ncaepted 
RC" number, but only if the method did not seem to be too elementary 
and If it perelated in Use ofter a few days, ainoe methods often 
disappeared by reason of the great volume of traffla. Serial ■ 
numbers reverted to 1 at the beginning of the Eastern Campaign: 
just before the surrender the 920th SC number was allotted. 

B, Breaking the five-figure Adder Systems 

As already mentioned, only those adder messages aan be broken 
which 1 have been reolphered by means of the so-called "universal 
blooknots". Therefore only suah messages are dealt with In this 
bhapter." 

Breaking'these messages depends on the assumption that the 
difference between two code-book groups' equals the difference 
between these two groups after they have been reolphered with the 
same adder group. 

a — b = (o + wl) - (b + w 1 ) = a + w 1 - b - W’ e a - b ^ 

1. Determining the Indicators (starting points) . 

The indicators qf an adder table oan be found without speoial 
difficulty, beoause at a given plane In the message the ABC and 
the HE values will recur. It Is thus possible to work out a system 
of starting point Indicators. 

. f 

2, Writing messages one below the other . 

With this system of lndioators the messages oan be written 
one under the other In such a way that the groups In the messages 
whioh have been reolphered with the some adder group lie directly ■ 
one below thB other. 


3; Compiling the oetalogue of differences . 


Next, in eaoh ooluan of groups all differences are worked out, 
and of tm possible differences It is agreed that only the lesser 
shall be velld. 


Example: 


■37529 B&553 

-89553 -37529 


58076 52034 


TENS: *Se'rman "VEHFAHREH NOHD, V- OST, V- SUED"respectively. 
/ w in this _ equation presumably for "WUEM" * adder. 
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Of the tro differences, 52034 is tnicen because It la the 
leaser. 

BieSe dlfferenoee are registered in a oatalogue, olaasified 
b<Sth aoaording to frequently of appeexanae end to thd columns 
from which they ere taken: thus every recorded difference out of 
the available material oan at any time be found. 

After some 'time there will accumulate in the catalogue of 
dlfferenoee a number of the latter whioh'oon be used as standard 
differences for subsequent stages of the work. According to the 
laws of probability it oan he ass used that identical oode-hook 
figures are the basis of equal differences: this assumption will 1 
of ooUrse entail a whole series of errors which will be recognized 
and rectified only at a later stage. ■ 

_4. Relating different oolumns to each other . 

After determining shout 10 standard differences, work is carried 
out only on those columns' in the massage aollations .which: 

* . I 

iVtaeve the greatest possible depth, and 

2; contain as many as possible of these standard.dlfferenoee. 

A particularly favourable oolunn is chosen to be the standard 
aolumn, i.e. the corresponding adder group is assumed to be zero. If 
then another ooltuon gives the same differences (both sdnused and 
1 subtracted having of course different values), then this column oan 
be equated with the standard aolumn and the relative adder group of 
this aolumn will be.determined. 

Example : 

Standard 
oolunsi 

a 12345 


b 00000 

f 89012^77777 = 12345 

o 85665 

g 77777-77777 = 00000 

d 11111 

h 93452-77777 = 26785 

a-b=12345 -s f-g= 1 2345 

d»-b =11111 — e-gslim 


a = f 
d a 8 

..' bag 

12345+77777 = 69012 

a f 


11111+77777 =■ ,88888 

d e 


00000+77777 = 77777 
' 8 

. 


After this "aac»indlp.t±on B the groups in .the new ooluutl oan be 
directly compared with the groups of the standard oolunsi, i.o. it 
is now possible to start drawing up frequency statistics. 


77777 = relative adder group 
.e 8B88B-77777 a 11111 
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5. Frequency statistics . 

As soon sa a column has been ossimlXated to the standard oolunm, 
the newly calculated groups (olphar group - Identified adder group) 
oan he inaluaed in simple frequency statistics : at last, one can 

reckon in terms of Comparable sizes. 

6. Decoding . 

If fairly large complexes of columns hove been assimilated, a 
start con he mads with the interpretation of the groups: < the first 
item interpretations, that is, the first breaks into the text of 
the message are achieved. 

7. Reoovery of original cipher instructions , 

I 

' This process consists merely in discovering the true adder group 
of the standard column. Given non-hatted construction.of the oode- 
book, this stage of the work can be oarried out promptly. When 
dealing with the five-figure code-book during the year '1939, figure 
enciphering used in this Aetiled was suooessfully enclosed to 
reconstruct the original data. A a a matter of fact, figures were 
re ciphered only witii the appropriate adder group; the oorreot date, 
time and unit figures were easily found. 


0. Deciphering . 

When a system had been solved, its messages could be read 
currently by the shift service of the appropriate deciphering 
department. 

1. Olphar recognition service . 

Hie multiplicity of aysterns which were simultaneously in force 
made it neaeaaary to identify the material. 

a. Call-sign or network Identification . 

If the network on whioh the messages had been transmitted 
was already known, suoh messages were sorted out end given 
some oali-sign identifications before being deciphered. If 
oell-signs had been identified, the appropriate system could 
be determined without difficulty. 

If, however, no information was 1 provided by traffic analysis, 
then identification had to be done'by the deciphering seation . 
without outside help. 

b. Code (SIGNAL) groups . 

Some of. tile systems were indicated by a special code group 
in the text: such a group-had to be. particularly obvious. Doublets 
etc. were much favoured te.g. 5555, 777 etc.). Sorietimes 
the code was given as a word (e.g. "oka", "rubin" eta.),. 
Difficulties in Identification occurred only when by chance - 
the same group was used in different eeators of the front for 
different eye terns: this was a not infrequent oaaurre.ioe . In 
such cases D/F aids were valuable. 
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o. Key groups.(indicators) ' - • 

Since cipher texts without indicators wbro the oJtoepfcloB, 
especially in recent times, indicators oould. oniy exoepfcion&rty 
be used for identification purposes - and then they had to tib 
very dearly differentiated: 

I 

d. Address grouts 

Enciphered address groups were os a fcule identical 
■ throughout .the Air Army: henau 1 they could only comparatively » 
rarely be used for unequivocal identifications, 

dear text addressee (surnames and, less often, military 
units) could be used 1 for identification by referring to 
special Indexes. 

e. General message' characteristics. 

Sometimes peculiarities (such os interpolated clear text, 
date groups at the .end of. the message, unusual preambles etc.) 
led to workable identifications. But even these observations 
were not always unambiguous. 

f. - Statistical picture . , ■ , 

Sometimes it was possible to recognise the system at a 
glance from the statistiool picture. Since, however, the 
statistical pictures were not in most aasee greatly 
differentiated owing to the choice of redphering systems, 
successful identifications of the.system used became even 
rarer by this means, which in any case required' the use 
of trained and adaptable personnel. 

2. Raalphcr investigations . 

Even 'in the aase of known systems, the recovery of new 
redpherments gave a certain amount of trouble.- 

Apart from peculiarities of a statistical nature; the 
building up of new redpherments was facilitated’ by a number of 
circumstances, 

a. Contents of ■ the message . 

In fret, the building up of a new reoipheiment was very 

oonfliderably assisted by tire regular transmission of stereotyped.- 

or at least similar messages. Thus, for example, a daily oilfield 
serviceability report'enables one very easily, to reconstruct new 
redpherments. 

Even the presenae of an identified address group enables one to 
draw conclusions as to the eatuol text (o.g, "to the divisional M.O."). 

The repetition of an order by STALIN, -for example, repeated on 
many different wireless networks with but few minor- variations, may 
be readied: this enabled redpherments of numerous sys tems to 
be recovered in parallel. On apodal holidays,(e.g. BED AEKT day eta.) 
almost identical congratulatory addressee were transmitted and these 
ooloured all the work on a particular day, end also simplified it. 
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b. The reolpherlng system . 

I 

Whan the reolpherlng system is known, new redipherments oan • 
also be recovered dth aom>erative -ease, When systematic rows 
or distinctive habits ore.in use for reolpherlng, often only n 
single olue is required for one to be able to build up the 
entire, reolphennent, T 

q. The basin code . ■ 

. Every peouliarity or system of the basic bode oan similarly 
yield the required .olue for recovering a new (edphexment. 

3. Interpretation of new items , 

- Successful decoding postulates good linguistic Knowledge, In 
addition to thla ,a certain knowledge of tactical procedure is • 
necessary,' 

Efforts ware variously made to compile on extract of the SJVIET 
vocabulary f^om the numerous recovered cipher inetructions, the 
few aaptuznd instructions and the broken material available. The 
"universal oode-books" recovered by this method have time and again 
rendered Valuable services' in docoding. ‘ 

E. . Aida to Crypto graphy. 

1. General aids and data . 

Just as cryptography is an auxiliary service for other 
departments in the general set-up of the Listening Service, so 
too'are all the results achieved by other departments auxiliaries 
to cryptography. 

All traffia analysis and D/F data (call-sign identification, 
network, diagrams, D/P results} and content and final evaluations 
(composite reports, diapersai tables and maps, unit and personnel 
indexes, lists of abbreviations, type designations and military ■ 
dictionaries) are continually of assistance to cryptography. 
Continuous liaison rflth the different a pedal is te is of the 
greatest-possible value. 

2, Special aids and data . 

a. The statistics pwrvftvnnw 

Various proformas were available for the numerous statistical 
researches; they were.at the same time used for reconstructing 
cipher instructions.. The cryptographer was able to cope with all 
neoeesaxy tasks with the .‘help of suoh proformas and did not 
. need to waste precious time in making them 19 by bend. Only 
in the rarest asses did the draughtsmen, of the evaluation 
department have to make apodal deuigns themselves. This fact 
was particularly advantageous in view of the .primitive conditions 
in the East. 

. h. Language statistics . 

Letter and bigrem statistics etc. of the RUSSIAN language 
were available from pre-war days, but they were used neithar - 
for new key breaking nor for aurrent work, lhe few basic rales - 
(frequency of letters) which could be used and whigh were of 
Importance for every cryptographer were easily memorised by 
everyone. 
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Speolnl indexes were provided in particular for the cipher 
identification service: they were adapted' to current needs at 
relatively short intervals. Pipper names, tasssage peculiarities, 
statistioal piotures, oharaoteiistios of the different system, 
oode groups, eto. were indexed currently and continually brought 
up to date. 

d. Message files. 

All broken messages were returned after intelligencing to 
cryptography and sorted out according to system (i.e. at the 
same time according to hetwoxk) And fajpt for a few months before 
being eent on to the CKI-STELIS. These message files proved 
very valuable when working out new systems and for the 
training of fresh personnel; 

V. EXAMPLE S nw ivnme y AIR TOROS OTPHER 33BTMB TW USE PORING 1KB 


CAMPAIGN IW ■pm; -BART : 



The autho r.ha s attempted to portray i & a few examples the typlool 
features of SOVIET systems. These examples are more or leas 
arbitrary constructions, since his powers of memory obviously cannot 
at retch to a complete reconstruction of systems actually in use. On 
the other hand a particular system has been boms in mind which while 
framing every one of the examples: lapses of memory have been filled 
in arbitrarily, but still by means of frequently recurring typical , 
instances. 


1. The exasples on the following page illustrate two aspects of the 
reconstruction of PT-tablas (general cipher systems in use by 
wireless operators at their transmitters) in the years i 933 and 1942. 

The upper table is a reconstruction of FI-39, The alphabet'with' 
single mornings is built up systematically: the system is . indicated 
by the yellow lines. Die blue dashes in the various squares indicate 
individual and sentence, items: the vocabulary is to some- extent 
oomp arable with that of the international Qroode groups. The 
reoipheririg figures along the margins are taken from the system 
table on page 24. 


The lower table.' is. o PT-table of 1942. (FT-42-1). Incidentally, 

four different tables wen used simultaneously In 194-1 or 1942. 

The alphabet has two meanings, only one of whioh is arranged 
systematically (yellow lines). The reciphering rows along tho 
margins are also taken from the system table on p_gu 24 , 
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2. Key tables with 200 ppaltlona . ,, 

She basis of this reconstruction Is the method in use by the 
56th BAB (at the beginning of 1945)* 

The cipher inritruotlnna oonsist of two pages, each-with 2x5- 
quadrants" with lO itenm eaoh. The items are only partially 
alphebetioally arranged, the figures 0-9 unsystematically arranged. 

Twn switch groups allow of using the whole item on the initial 
letters only. 

Reolphering is done by means of two strips.. Eaoh reciphering strip 
is indicated in sectors by a two-figure group. ■ 


For a period of one month, 10 strips with different indicators ■ 
from 00-49 and AB-values (quadrants) from 50-95 (also In scoters) and 
itJ -futthir stripe with indicators from 50-99 and AB-values from 00-49 
too issued. Two strips' from eaoh of the strip series oen be combined for 
eaoh re alpha nnent. . 

Example of a higher message . ' The 'reolphering strips are planed 
alongside the data' on page £i 


£555 ^Indicator) 

001 nao 
016 ohtaba 
896 diwisli 
106 0. 

152 proahu 
968 soohqltx 
,759 kogda . 

811 

988 s 
699 5 
896 d 
668 e 
523 t 
014 (3) 

705 1 
325 7 • 


855 

4 

881 

<6) '• 

748 

a 

152 

je 

024 

l 

017 

na 

015 

naoh 

743 

a-rodrom 

146 

0 

437 

major 

841 

© 

210 

P 

,098 

0 .. 

152 

p 

357 

o 

710 

w 

116 

B 


Crltiol'sm of the system . 

In- sjlte of the small nuafcer of items, cipher security is fairly ■ 
high, especially when letters are oorreotly enciphered so that no 
frequency peaks appear in the message ttatistios, In the case of 
Individual reolpheiing of the 0-values (lines) reconstruction of the ' 
actual original data is verf difficult because the significations are cot 
arranged alphabetically according to their initial letters and are 
spread over various quadrants. The indicators are easily recognisable 
if oniy because they have a different lumber of symbols. It is 
comparatively easy to oolleot different messages' having the same 
reolphe nnent because the sector'values of the indicators are easily 
found on account of the switch groups in the code-book, these 
having but.one meaning. 1 * 
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3. Cipher table of a flying unit . 

This la a repons truction of a tn£le of VIII CHtK. 

1 The jbaglo key consists of 9 aoiuuis, eaah with 9 quadrants of 
9 lines eaoh. Only the lineB axe numbered right through (1-9) la 
the original. Every line is divided into two portions; the left- 
hand portions contain letters end the letters within a quadrant - 
reed from top to hotton - build a Word; the rlght-hend portions of 
the lines ore filled with completely unsystematically arranged word . 
items and with figures. The choice of the required halves of lines 
is regulated by switch groups (hiving only one mqahlhg). 

Beoioherinz . The table is xteoiphered by means .of two 9-symbol 
rows of figures with single-digit individual aun&exB,Bie lines 
remain constant. In the reoiphering rows used, the ValueB 0 are 
In all oases looking, so that the message statistic*! are strongly 
differentiated in' consequence. No.indicators ■ are u&'ed'but their 
’ place is token by the switch group.. The first group of the message 
la in every aase one of the two switch groups: the AB-^aluss vfcloh - 
are the same in both switch, gmupa may therefore be reckoned as 
indicators. No system in connection with the reoiphering roWs could 
be determined. ■> » 


j Bxojaale of a cipher message . . In the rsanna truotion of the key - 
on page 63 only the 4 top quadrant lines are shown in' part: the lower 
5 are missing. The red reaipharing figures ore arbitrarily plftoed ' 
alongside. . 

833 (X! , the AB-value,' simultaneously indicator. , 

476 .■& '■ • 

675 e • 

753 a 
474 e 
175 d 

155 1 

156 e , . 

777 n • ■ 

759 n 
973 o 
836 (ol . 

759 donesti 
152 mss to 

;»©■• > • 

476 n * 

a 

h ■ 

\ « 
o - 

V 
d 


159 

733 

734 

735 
175 
372 
879 
631 
638 


e 

n . 
i 

a + 


' Critlolsm of the system. The cipher security of the table is 
fairly high because all letters have more than one meaning end if the 
letter items are cleverly chosen no agglomerations will occur. The 
completely unsystematic arrangement, of the word..items does, however, 
■tempt the encipherers to encipher almost exclusively letters for the 
sake of oonvenienoe. - it is very difficult to recover the basis key: 

' word, meanings of. the letters in a quadrant become apparent ’only after 
fairly lengthy work. The fact that the C-values remain constant does, 
however, ease the task. 13 m switch groups ldiiah hays only one meaning 
enable one to distinguish without difficulty between letter'and word 

. portions within the cipher messages. 




w a 
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jfca 10-page ooda-book of the ground organisation . 

■ Tha cipher instructions are made up of 10 pages, every one having 
10 x 10 item. Conditionally alphabetical sequence: the word group* 

. are arranged aooording to their initial letters, bat the word elements 
among one another are not arranged with reference to their initials. 
The figures 0-9 are arbitrarily spread- over the pagesi Amplifying 
groups have 10 meanings: every page has a pair of amplifying groups. 

Eeoipharlng . The 10 oode-book pages (A-valuea) are rediphered 
with two-digit seotor values (AB of the .aipher groups). The . 
aorresponding reoiphexing rows are designated in seotoiB by two-digit 
identification numbers, but the B-values of the identification 
numbers are in fact only dummies and can be eliminated without 
affecting the issue. The 10 page-reaiphering rows ere changed 
monthly. 

The columns' within the pages are reoiphsred by means of b ingle-; 
digit.figure rows. Here too 10 unrelated rows are used every month,' 

i 

- ■ _ , . % 

During the bourse of any given month, the lines- (D) are 
altered merely by means of a row: this row can, however, be varied 
(drum). Tha D-value of the message indicator gives the starting 
point for this line reoiphsrlng row. 

The reoiphering sows of the indicator 5309 are planed alongside 
the cipher instructions on pegs £5. The signification "awia" 
for instance,-would thus be rendered "7343". 

’ Criticism of the avatom . The conditionally alphabetical build-up 
of the data facilitates its reduction to original Taluca (arrangement 
of pages end columns) . Tha lines, however, could not bo re-arranged 
unless they had been reoiphered by .means of drum variants. - The Tact 
that change-over groups have 10 meanings makes it difficult to 
differentiate between letter text and word text, - 
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sO tj~- 6 7 8.5 13 2 9 

AJ1 Afl 



a 20-29 30-39 40-49 50*59. 60-69 70-79 80-89 90^99 


; 22-25 26^32 56-63 07-15 36-44 70-76 08-19 32-45 64-79 50-54 
|43-55 33-45 20-35 51-69 64-77 43-49 50-65 76-83 82-94 67-73 
186-10 78-86 08-19 96-06 13-21 91-00 79-91 17-25 1 7-21 95-01 
', 60-72 54-69 91-99 23-33 03-12 16-25 45-49 46-53 22-36 02-11 
J26-32 93-01 74-76 70-76 60-63 77-90 20-35 84-97 05-16 55-66 
1 30-35 02-11 43-55 42,50 93-02 50-63 66-71 .26-31 71-81 86-94 
11-21 70-77 00 - 07 . 16-22 78-81 26-31 92-99 98-08 45-49 26-31 
56-59 07-92 77-90 90-95 22-35 22-42 00-07 54-60 50-63 12-25 
73-79 12-25 36-42 77-89 82-92 64-69 72-78 09-16 95-04 32-49 
33-42 46-53 64-73 34-41 45-59 01-15 36-44 61-75 37-44 74-85 



0 4 6 7 8 . 
~ i 0 6 4 0 9 
?- i 8 1 9 4 2 
3 •; 6 3 7 1 5 
4-138175 
5 17 14 5 6 
6(9 3 5 7 0 
798651 
a ! a 6 9 4 3 
9 13 10 5 8 


5 13 2 9 
7 1332 
0 3 7 5 6 
0 4 8 2 9 
9 4 ' 6 " 2 0 
3 2 8 0 9 

1 2 6 48 

2 4 3 ’7.0 
2 5 17 0 

6 4 7 2 9 



. JL. 3 

3 0 


'8 J 
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5. • 10-nege 00 da-book of the ground organisation . ' 

The cipher instructions are built up oomplately systematically:' 
lexicographic arrangement of words and word elements, systematic 
arrangement of the numbers OQ-99, a witch groups In the last oolumri 
of the last page (with one meshing). The lines are' divided: letters 
and higrama on the left, syllabus and words as a rule on the right. 
All items on one line have the same Initial letter. While the 
meanings on the right ,are built up entirely lexicographically, the 
bigrems on the left aide are odaaalonally hatted. 

Recdpharing . The reolphefing rows for page and line axe coupled 
together, thus they cannot arbitrarily be varied in respect of eaph 
other. Die iecipherihg row for.column (b) it a cyclic variant of 
thecor responding C^row. Method of reading the oipher group: 

. CB8&. Two dummies at;, attached to the original cipher group ACB. 
Method of reedihgthe indicator At the beginning of the nlessage ia 
also AGT|^. 

Oritloiam of the 'system . the systematic btilld-up of the Cipher 
instructions considerably facilitates all technical breaking - 
processes. Only the- hatting of the bigrems on the left side of the 
oolunns leads one astray, particularly at first. The switch groUpS 
"left", "right" and in addition "letter" also cause difficulties. - 
The reaiphering rows of the month are often simply enough oyolla 
variants with email variations ; (transposition of two figure 
values) end allow onepartially to reconstruct unidentified rows. 

The attaching of the two' dummy values to the oipher group is easy 
to recognise and to eliminate on the basis of the statistical 
picture. 
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1. Orgenla atlon of Chi-Stalle Eaat . 

In practice the two Sea tain Seotlons of the Chi-Stelle 
^Evaluation, E 1/cryptography) were merged into evaluation 
or'cryptographic parties with Regiments; the leading spirit in 
the Eastern organisation. Major Kupffer beoame liaieon officer 
at Luftwaffe ,HQ, Only 2 members of the Chi-Stelle remained with 
the regimenti Lt. Wienikpw (evaluation) and Lti v. Iingen 
(aryotogrftphy); however their influence on the organisation of 
woric in the east wee very email* all toe more bedauae they had 
been refused both by the Regiment aa also by the detoohments for 
teohnioal and also personal reasons. 

2. Pri nciples of the SOViifl oall-ai^n system . 

Although the author did at one time take a personal interest in 
this question, he is unable to supply any information on the matter. 

He remembers only that until. 1344, there existed certain relationships' 
between change of oall-sign and PT-table reaiphering (the reoiphering 
rows were the same, for both provinoea).. It was als o possible to 
establish a relationship between change of aall—sign end the 
reaiphering rows of soma HAB systems (three-figure). It should, 
however, be noted that the investigation of toe principles 
underlying the oall-sign system wsa very much leas to the fore in 
the case of the GAP than in that of the Army, because: 


.1. The smaller nusher of air foroe networks allowed' 
from toe first of better coverage, even toen the 
daily ohanges of aall—aign took place apparently 
entirely unsyatematiaslly, end 
2. because of leak of personnel. 

Hie specialist on toe principles of toe oall-aign system in 
11/353 was PT. HEINS, a oonsoientious and successful worker, who 
is probably at present in HAMBURG-, address not known. But in any 
case the corresponding norkers of the Amy 8IGINT stations will ■ 
ba in a position to furnish better information . 1 

’• JEa__3!lhg_ PorBahl£PCT «»"^ > 

The autoor knows no details about the work of ,the Porsahungs- 
amt, as -its activity was kept very seoret. In any .case work was done 
■ ' there on diplomatic treffloa, at least, however, it was intercepted. 
Also there wae some talk of eaoaomla espionage. The staff, were 
extremely well paid, but were very retiaent; the autoor knew no-one ■ 
in the Porechungsamt personally. 


Neither was it known who was behind this organisation; 

opinions varied between the, Relahsmarschall or toe S8 (or both). 

®iga in 1 9A2 the autoor received an offer of - transfer to toe 
SS (?) oryptographic department from an SS-Puhrer known to him, who, 
however, had not been told by him about the nature of his work. 

. Perhaps toe Forsahuhgjamtwaus meant. Hie head of. the oryptographia 
section was said to have been a former naval officer, ■ 


‘l 



